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Cover  Story:  Building  Global  Maritime  Partnerships  -  the  U.S.  Navy,  working 
closely  with  government  and  nongovernment  national  and  international  organi¬ 
zations,  is  engaged  worldwide  fostering  strong  relationships,  from  African  Part¬ 
nership  Station  with  USS  Nashville  (LPD  13)  in  Ghana  to  Southern  Partnership  Sta¬ 
tion  with  High  speed  vessel  Swift  (HSV  2)  in  South  America,  to  improve  maritime 
safety  and  security  and  ensure  freedom  of  the  seas. 

In  the  photo  above,  Sailors  aboard  the  amphibious  transport  dock  ship  USS 
Nashville  (LPD  13)  salute  the  Nigerian  Navy  frigate  NNS  Aradu  (F  89)  while  pull¬ 
ing  into  Lagos  Nigeria.  Nashville  is  deployed  as  part  of  Africa  Partnership  Sta¬ 
tion,  an  international  initiative,  which  aims  to  work  cooperatively  with  U.S.  and 
international  partners  to  improve  maritime  safety  and  security  on  the  African 
continent.  U.S.  Navy  photo  by  Mass  Communication  Specialist  3rd  Class  Matthew 
Bookwalter. 
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Cover 


UTAPHAO,  Thailand  (Feb.  27,  2008)  Adm.  Timothy  J.  Keating, 
commander  of  U.S.  Pacific  Command,  is  greeted  by  Royal  Thai 
Navy  pilots  upon  his  arrival  to  Utaphoa.  Keating  met  with  Thai 
military  leaders  and  government  officials  and  emphasized  the 
importance  of  the  shared  commitment  to  peace,  stability  and  se¬ 
curity  throughout  the  region.  Navy  photo  by  Mass  Communication 
Specialist  2nd  Class  Elisia  V.  Gonzales. 
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Editor's  Notebook 

In  this  issue,  we  examine  the  enduring  importance  of  maritime  security  to  project 
forward  presence;  protect  trade  and  shipping  lanes;  preserve  national  sovereignty; 
ensure  regional  stability;  and  prevent  criminal  activity  and  violent  extremists'  use  of 
the  maritime  environment  as  a  venue  for  attack  or  to  transport  contraband.  Maritime 
security  is  an  objective  also  prized  by  our  closest  allies  and  newest  partners  in  maritime 
security  operations. 

Deputy  Supreme  Allied  Commander  Transformation  Adm.  Luciano  Zappata  refers 
to  maritime  security  as  "freedom  of  the  seas/'  and  in  this  issue,  he  discusses  the  need 
to  expand  maritime  partnerships  beyond  traditional  NATO  partners.  More  and  more 
countries  are  emerging  to  protect  their  vital  interests  at  sea.  We  share  the  same  chal¬ 
lenges  and  must  work  within  the  same  complex  international  political  and  legal  frame¬ 
work  to  ensure  maritime  safety  and  security,  Adm.  Zappata  said. 

Sharing  in  the  maritime  security  discussion  are  Capt.  Jack  L.  Sotherland,  commodore 
of  the  Bataan  Expeditionary  Strike  Group  and  commander  of  Amphibious  Squadron 
Two,  and  the  commanding  officer  of  FS  Tonnerre,  French  Navy  Capt.  Edmond  de 
Vigourouxd'Arvieu. 

The  Bataan  ESG  and  Tonnerre  underwent  maritime  security  training  in  February.  "No 
one  navy  can  do  it  alone,"  Sotherland  said.  The  U.S.  Navy  must  take  advantage  of  the 
strengths  and  expertise  of  allied  partners,  he  said.  Many  of  our  allies  like  the  English, 
Dutch  and  French,  just  to  name  a  few,  have  hundreds  of  years  of  experience  in  working 
with  other  nations  and  cultures...  Sotherland  said  that  partner  nations  bring  a  differ¬ 
ent  perspective  and  understanding  to  forming  maritime  coalitions. 

In  his  interview,  USJFCOM's  Director  for  Strategy  and  Policy  Rear  Adm.  John  M.  Rich¬ 
ardson  discusses  the  Joint  Operating  Environment  which  forecasts  possible  challenges 
and  opportunities  that  will  face  the  joint  force  in  the  future.  Analysts  predict  that  it 
will  fall  to  the  United  States  and  its  partner  nations  to  protect  and  sustain  the  peace¬ 
ful  global  system  of  interdependent  networks  of  trade,  finance,  information,  law  and 
governance.  So  it  is  paramount  that  nations  work  together  to  ensure  stability  in  the 
maritime  environment. 

Security  operations  and  interoperability  with  partner  nations  would  not  be  possible 
without  robust  command  and  control,  and  OPNAV  N6  Vice  Adm.  Harry  B.  Harris  and 
NETWARCOM  Commander  Vice  Adm.  H.  Denby  Starling  II  discuss  strategy  and  policy 
initiatives  that  will  strengthen  the  naval  network  environment  for  warfighting  opera¬ 
tions  as  well  as  business  transactions. 

In  February,  CHIPS  joined  Team  SPAWAR  in  an  exhibit  at  West  2009  in  San  Diego  and 
the  DON  CIO  at  the  DON  IM/IT  Conference  held  at  the  same  time  and  location  as  West 
2009.  The  DON  IM/IT  Conference  was  a  great  way  to  learn  about  new  DON  policy  and 
projects  and  connect  with  colleagues. 

See  you  at  the  East  Coast  DON  IM/IT  Conference,  May  11-14,  2009,  at  the  Virginia 
Beach  Convention  Center.  The  conference  will  be  held  at  the  same  time  and  location  as 
the  Joint  Warfighting  Conference.  Register  for  the  DON  IM/IT  Conference  by  going  to 
the  DON  CIO  Web  site:  www.doncio.navy.mil. 


Italian  Navy  Adm.  Luciano  Zappata 


Aboard  FS  Tonnerre,  Marines  from  the  22nd  MEU 
prepare  for  the  Composite  Training  Unit  Exercise  as 
part  of  the  Bataan  Expeditionary  Strike  Group  with 
Tonnerre's  officers  and  crew. 


No  one  navy  can  do  it  alone...  The 
U.S.  Navy  must  take  advantage 
of  the  strengths  and  expertise 
of  allied  partners  ...  They  bring 
a  different  perspective  and 
understanding  to  forming  maritime 
coalitions. 

U.S.  Navy  Capt.  Jack  L.  Sotherland 


Welcome  new  subscribers! 


Sharon  Anderson 
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Our  nation  has  set  forth  strategies  to  protect 
our  homeland  and  the  maritime  domain  that 
surrounds  it.  A  key  facet  of  these  strategies  is 
building  partnerships.  The  Navy,  Marine  Corps 
and  Coast  Guard  have  partnered  together  to 
build  our  21st  century  seapower. 

Partnerships  are  being  built  across  federal 
agencies  and  with  state,  local  and  tribal  enti¬ 
ties.  Partnerships  also  expand  globally  with  our 
NATO  allies  and  other  international  partners. 

Expanding  cooperative  relationships  and 
developing  partnerships  with  other  nations 
contributes  to  the  security  and  stability  of  the  maritime  domain 
for  the  benefit  of  all.  All  of  these  partnerships  rely  on  the  ability  to 
share  information. 

In  the  Department  of  the  Navy,  our  efforts  are  primarily  focused 
on  the  maritime  domain.  Maritime  Domain 
Awareness  (MDA)  is  defined  as  "effective 
knowledge  of  all  activities  associated  with 
the  global  maritime  environment  that  could 
impact  the  security,  safety,  economy,  or  en¬ 
vironment  of  the  United  States."  Information 
sharing  is  a  foundational  tenet  of  MDA. 

Recent  piracy  events  challenge  international  security  and  impact 
the  global  economy.  Combating  these  events  has  brought  about  a 
new  requirement  to  interact  and  share  information  with  a  diverse 
set  of  partners  outside  our  firewalls  on  a  non-classified  enclave. 
This  has  brought  a  new  perspective  and  new  challenges. 

Truly  successful  information  sharing  requires  a  shift  in  the  way  we 
do  business.  The  first  and  perhaps  most  difficult  challenge  is  chang¬ 
ing  culture.  We  must  move  away  from  the  "isolated  need  to  know" 
and  move  to  the  "trusted  need  to  share."  As  the  Web  2.0  generation 
continues  to  pervade  our  workforce  with  their  ingrained  practice 
of  constant  collaboration  and  openness,  this  will  also  help  shift  our 
government  culture  toward  one  that  readily  fosters  and  benefits 
from  information  sharing. 

A  second  challenge  is  the  fact  that  existing  information  sharing 
policies  are  not  always  adequate.  In  addition  to  following  all  civil 
liberty,  regulatory  and  legal  guidelines,  before  we  share  our  in¬ 
formation,  we  must  be  ever  vigilant  about  securing  sensitive  data 
and  sharing  that  data  in  a  secure  environment.  But  we  must  also 
develop  reliable  and  repeatable  governance  and  risk  management 
processes  that  will  foster  information  sharing. 

Lastly,  since  our  world  of  information  technology  is  evolving 
more  rapidly,  additional  technologies,  such  as  attribute-based  ac¬ 
cess  control,  become  central  to  assured  information  access.  With 
these  technologies,  we  can  ensure  that  consumers  of  information 


Information  Sharing  to  Build 
Partnerships  in  Support  of 
Maritime  Domain  Awareness 


are  authorized  access  using  standards-based 
identity  management  solutions. 

Ultimately,  information  sharing  is  all  about 
the  data.  We  need  the  ability  to  find  the  data, 
access  it,  sort  through  it  and  combine  it  to 
develop  information,  intelligence  and  knowl¬ 
edge,  and  then  make  those  findings  available. 
Some  of  today's  ongoing  efforts  will  provide  a 
solid  foundation  for  data  standards  and  infor¬ 
mation  exchange. 

The  release  of  Universal  Core  version  2.0 
(UCore)  marks  a  successful  milestone  toward 
achieving  interoperability.  It  is  a  collective  effort  across  four  federal 
departments  to  create  a  core  standard  of  the  most  common  data 
elements  across  all  possible  exchanges. 

The  National  Information  Exchange  Model  (NIEM)  leverages  the 
data  exchange  standards  efforts  successfully 
implemented  by  the  Global  Justice  Informa¬ 
tion  Sharing  Initiative.  It  facilitates  timely,  secure 
information  sharing  across  the  justice,  public 
safety,  emergency  and  disaster  management, 
intelligence,  and  homeland  security  enterprises. 

The  Maritime  Information  Exchange  Model  (MIEM)  provides 
standards  that  support  the  tracking  of  maritime  vessels,  cargo  and 
people  with  rich  metadata  associations  to  support  increased  infor¬ 
mation  sharing  and  will  provide  the  foundation  for  the  MDA  data 
architecture. 

All  of  these  efforts  are  based  in  Extensible  Markup  Language 
which  is  a  platform-independent  standard.  XML  requires  minimal 
work  to  alter  existing  and  legacy  systems  or  databases  and  can  usu¬ 
ally  be  implemented  in  a  matter  of  weeks  to  support  net-centric 
information  sharing. 

The  scope  of  maritime  domain  awareness  is  broad,  but  it  is  im¬ 
portant  that  we  do  not  try  to  "boil  the  ocean."  Rather,  an  incremen¬ 
tal  approach  to  implementation  will  allow  us  to  achieve  quick  re¬ 
sults  and  build  upon  successes  or  troubleshoot  issues  as  they  arise. 
These  incremental  results  also  push  the  cultural,  policy  and  techni¬ 
cal  barriers  one  bit  at  a  time. 

While  my  office  has  the  lead  for  the  interagency  effort  to  develop 
a  comprehensive  MDA  architecture,  there  are  several  commands 
contributing  to  this  important  effort,  including  OPNAV  N3/5  (In¬ 
formation,  Plans  and  Strategy),  which  has  the  overall  lead  for  MDA 
within  the  Navy.  Together  we  will  define  and  refine  the  aligned  sets 
of  tools  used  to  deliver  the  right  maritime  information  at  the  right 
time  to  authorized  users,  whoever  they  are.  Information  sharing 
within  the  context  of  MDA  presents  definite  challenges,  but  we  are 
working  together  to  overcome  them. 
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Interview  with  Vice  Admiral  Harry  B.  Harris  Jr. 

Deputy  Chief  of  Naval  Operations  for  Communication  Networks 

Vice  Admiral  Harry  B.  Harris  Jr.  is  the  Deputy  Chief  of  Naval  Operations  for  Communication 
Networks  (OPNAV  N6)  and  the  Deputy  Department  of  the  Navy  Chief  Information  Officer  (Navy). 

A  Naval  Academy  graduate  and  naval  flight  officer,  Vice  Adm.  Harris  was  selected  for  the  Navy's 
Harvard/Tufts  Program.  He  attended  the  John  F.  Kennedy  School  of  Government  at  Harvard  Uni¬ 
versity,  graduating  in  1992  with  a  Master  of  Public  Administration  degree.  Selected  as  an  Arthur 
S.  Moreau  Scholar,  he  studied  international  relations  at  Oxford  and  Georgetown  universities, 
earning  a  Master  of  Arts  in  National  Security  Studies  from  the  latter  in  1994.  While  at  George¬ 
town,  he  was  a  Fellow  in  the  School  of  Foreign  Service.  He  is  also  an  MIT  Seminar  XXI  Fellow. 

Vice  Adm.  Harris  has  logged  4,400  flight  hours,  including  more  than  400  combat  hours,  in  U.S. 
and  foreign  maritime  patrol  and  reconnaissance  aircraft.  He  assumed  his  present  duties  as  OPNAV 
N6  in  June  2008.  Previous  command  tours  include:  Patrol  Squadron  (VP)  46,  Task  Force  57/72  and  Joint  Task  Force  Guantanamo. 

N6  serves  as  the  principal  adviser  to  the  CNO  for  all  communication  networks  and  is  matrixed  with  N2  for  ISR  and  N3/5  for  Infor¬ 
mation  Operations  (10)  and  command  and  control  (C2).  As  the  Navy's  CIO,  Vice  Adm.  Harris  ensures  optimum  use  of  Navy  informa¬ 
tion  technology/information  management  (IT/IM)  resources. 

N6  includes  N6F  -  Warfare  Integration,  N60/62  -  Programming  and  Fiscal  Management  and  N61  -  Capability  Analysis  and 
Assessment.  CHIPS  spoke  with  Vice  Adm.  Harris  in  January  about  N6's  top  priorities. 


CHIPS:  One  of  the  reasons  for  the  stand  up  ofN6  was  to  gain  better 
visibility  into  how  IT  money  is  spent  across  the  Navy ;  reduce  legacy 
networks ,  and  invest  in  more  efficient  models  like  service  oriented 
architecture.  Can  you  talk  about  progress  made  in  this  area? 

Vice  Adm.  Harris:  We  are  making  good  progress  in  the  area  of 
cost  visibility.  We  are  doing  that  in  three  different  ways,  with 
three  different  methodologies. 

First,  there  is  CARS,  an  acronym  that  stands  for  Cyber  Asset 
Reduction  and  Security.  This  is  an  effort  to  reduce  our  legacy 
networks.  One  of  the  biggest  hurdles  to  a  secure  network  en¬ 
vironment  is  legacy  networks.  We  have  reduced  our  number  of 
legacy  networks  from  over  1,000  to  less  than  500. 

We  have  had  success  with  CARS,  but  we  have  a  long  way  to  go. 
We  want  to  get  that  500  down  to  less  than  200.  This  is  an  area 
of  focus  for  us.  Naval  Network  Warfare  Command  in  Norfolk  is 
responsible  for  executing  CARS.  They  have  a  CARS  team  whose 
goal  is  to  get  us  down  below  200  networks  by  2010.  They  are  on 
the  right  glide  scope  to  do  that. 

The  second  initiative  we  have  is  an  Echelon  II  Command  IT 
Budget  Stewardship  Review.  You  may  have  known  it  by  its  for¬ 
mer  name,  'Capture  the  Money.'  We  are  trying  to  establish  total 
IT  cost  visibility  and  accountability.  How  IT  money  is  spent  used 
to  be  a  mystery.  Our  goal  is  to  eliminate  the  mystery  and  make 
things  transparent. 

We  want  to  look  at  execution  budget  reviews  and  identify 
where  the  money  is  being  spent  and  recommend  realignment 
of  funding  that  is  not  executed  in  compliance  with  statutes,  di¬ 
rectives  and  guidance.  We  have  done  a  couple  of  these  so  far, 
and  we  have  had  some  good  success.  To  date,  we  have  been 
able  to  realign  $100  million  in  IT  funds  across  a  number  of  com¬ 
mands.  That  is  significant,  that  is  real  money. 

The  last  area  we  call  the  ITMC,  the  IT  Management  Council. 


This  is  an  effort  to  consolidate  IT  decision-making  and  gover¬ 
nance.  The  CARS  team  goes  after  security,  the  budget  steward¬ 
ship  review  process  goes  after  money,  and  the  ITMC  goes  after 
centralized  decision-making  and  governance. 

The  ITMC  is  chaired  by  the  Vice  Chief  of  Naval  Operations  and 
the  Department  of  the  Navy  Deputy  Chief  Information  Officer 
(Navy... that's  me).  It  is  comprised  of  executive  leadership  from 
each  of  the  OPNAV  N-codes  as  well  as  Fleet  Forces  Command; 
NAVAIR  (Naval  Air  Systems  Command);  NAVSEA  (Naval  Sea  Sys¬ 
tems  Command);  Navy  Installations  Command;  NAVFAC  (Naval 
Facilities  Engineering  Command);  SPAWAR  (Space  and  Naval 
Warfare  Systems  Command);  NAVSUP  (Naval  Supply  Systems 
Command);  and  Naval  Network  Warfare  Command. 

There  are  also  executive  advisers  and  those  include  the  DON 
CIO,  Mr.  Robert  Carey;  Assistant  Secretary  of  the  Navy  for  Re¬ 
search,  Development  and  Acquisition,  Mr.  Sean  Stackley;  and 
the  Marine  Corps  DDCIO,  Brig.  Gen.  George  Allen,  director,  C4/ 
CIO.  We  feel  that  the  ITMC  is  working,  and  it  serves  as  a  single 
senior  Navy  IT  decision  forum  necessary  to  help  us  achieve  the 
NNE,  the  Naval  Networking  Environment.  We  are  happy  about 
that  in  the  IT  Management  Council,  and  we  are  using  it  as  a  tool 
to  get  our  arms  around  governance. 

CHIPS:  What  else  do  you  hope  to  accomplish  in  your  time  as  A/6? 

Vice  Adm.  Harris:  I  have  already  talked  about  governance,  secu¬ 
rity,  our  decision  superiority,  and  a  move  toward  the  NNE,  or  the 
Naval  Networking  Environment.  Our  challenge  is  —  how  do  you 
deliver  decision  superiority? 

I  define  that  as  delivering  knowledge,  information,  intelli¬ 
gence,  data  and  orders,  and  how  you  do  that  virtually,  instanta¬ 
neously  against  21st  century  cyber  threats  and  to  the  warfighter 
and  back  in  a  fiscally  constrained  environment. 
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If  we  had  unlimited  resources  we  could  achieve  unlimited 
things.  The  challenge  is  to  achieve  great  things  with  limited  re¬ 
sources.  In  order  to  do  that,  we  need  to  achieve  a  true  NNE,  or 
Naval  Networking  Environment.  That's  going  to  take  a  commit¬ 
ment  from  everyone,  not  just  the  N6,  to  get  it  right. 

We  no  longer  have  the  resources  to  develop  or  field  what  I  call 
stovepipe  network  solutions.  Our  NNE  concept  is  the  right  move 
to  get  our  networks  in  line  and  integrated  for  the  future. 

While  I  am  the  N6, 1  intend  to  make  a  focused  effort  to  bring 
policy,  budget,  resources  and  accountability  into  alignment  to 
establish  an  effective  enterprise  approach  into  the  way  we  do 
business  and  deliver  those  cyber  capabilities  that  our  warfight¬ 
ers  on  the  pointy  end  say  they  need  to  execute  their  mission. 

It  is  really  about  the  warfighters  at  the  end  of  the  day.  That  is 
why  we  are  making  this  effort  to  get  it  right. 

CHIPS:  The  Navy  is  also  hampered  by  legacy  business  systems.  Does 
N6  have  an  interest  in  replacing  these  systems  with  Navy  Enterprise 
Resource  Planning? 

Vice  Adm.  Harris:  The  short  answer  to  that  is  yes,  but  I  will  give 
you  a  longer  answer.  We  do  have  an  interest  in  Navy  ERP.  I  be¬ 
lieve  that  it  is  a  major  step  toward  transformation  of  our  busi¬ 
ness  processes  in  the  Navy.  It  will  lead  to  a  modern  standardized 
and  interconnected  Navy  enterprise  operation. 

This  will  give  us  financial  transparency,  asset  visibility  and 
business  process  effectiveness  and  efficiency  to  support  our 
warfighters.  That  is  what  ERP  is  all  about  at  the  end  of  the  day. 
ERP  Release  1.0  provides  functionality  in  financial  operations  as 
well  as  program  management,  materials  management  and  sup¬ 
ply  chain  management. 

We  are  doing  this  in  phases.  We  started  with  NAVAIR  in  2007. 
In  October  2008,  we  instantiated  ERP  at  NAVSUP.  Later  in  2009, 
we  start  ERP  with  SPAWAR.  We  do  NAVSEA  starting  in  2010  and 
Working  Capital  Fund  activities  in  2011. 

While  ERP  is  tremendous,  it  is  simply  a  tool,  albeit  a  high-per¬ 
forming  one,  with  a  lot  of  potential.  The  use  of  this  tool  by  folks 
that  know  what  they  are  doing,  and  knowledgeable  and  moti¬ 
vated  users,  can  get  us  where  we  want  to  go. 

There  are  two  parts,  the  tool  itself,  and  the  people  who  oper¬ 
ate  it.  They  are  both  equally  important. 


OPNAV  N6  Vice  Adm.  Harry  B.  Harris  Jr.  speaking  in  a  panel  discussion  about 
cyber  challenges  at  West  2009  in  San  Diego  in  February.  West  is  cosponsored 
by  AFCEA  International  and  the  U.S.  Naval  Institute.  Photo  courtesy  of  AFCEA 
International. 


terns  (PEO  EIS),  Center  for  Naval  Analyses,  Naval  Network  War¬ 
fare  Command  (NETWARCOM)  and  various  other  naval  organi¬ 
zations,  developed  the  requirements  document.  N6  serves  as 
the  resource  sponsor. 

There  is  now  a  separate  organization  in  the  Navy  called  the 
ACNO  for  NGEN.  That  person,  the  Assistant  Chief  of  Naval  Op¬ 
erations  for  NGEN,  leads  the  System  Program  Office,  the  SPO  for 
NGEN.  It  is  a  separate  office  outside  N6  on  the  horizontal  line 
with  the  other  OPNAV  N-codes.  This  brings  focus  and  talent  to 
make  NGEN  a  real  thing.  CNO  has  named  a  two-star  admiral  to 
run  the  SPO,  to  be  the  ACNO  NGEN,  Rear  Adm.  Bill  Goodwin. 

CHIPS:  Will  PEO  EIS  execute  the  acquisition? 

Vice  Adm.  Harris:  That's  a  good  question.  Yes,  Rear  Adm.  'Grunt' 
Smith,  the  new  PEO  EIS,  is  responsible  for  the  acquisition. 

CHIPS:  In  2007,  the  Secretary  of  the  Navy  directed  the  Navy  to  dem¬ 
onstrate  Maritime  Domain  Awareness  capability  in  a  year.  Can  you 
talk  about  the  progress  made  in  MDA  technology  and  doctrine? 


CHIPS:  N6  is  directly  involved  in  Next  Generation  Enterprise  Network 
planning.  Can  you  talk  about  NGEN? 

Vice  Adm.  Harris:  NGEN  is  part  of  a  larger  Department  of  the 
Navy  effort  to  create  a  true  net-centric  operation  across  all  of 
our  networks.  NGEN  is  the  follow-on  to  the  Navy  Marine  Corps 
Intranet.  With  NGEN,  we  hope  to  get  improved  government 
control  and  improved  flexibility  and  agility  in  the  way  we  oper¬ 
ate  the  network. 

This  is  not  a  criticism  of  NMCI.  NGEN  is  just  the  next  phase,  or 
level,  where  we  improve  and  increase  our  ability  to  control  our 
own  networks.  NGEN  is  going  to  be  the  foundation  of  the  NNE. 
The  goal  is  more  adaptability,  more  reliability  and  more  security 
to  give  us  more  government  control  and  oversight  in  direct  sup¬ 
port  of  the  naval  warfighter. 

N6  and  Headquarters  Marine  Corps  C4,  along  with  support 
from  Program  Executive  Office  for  Enterprise  Information  Sys- 


Vice  Adm.  Harris:  Maritime  Domain  Awareness  is  a  big  deal.  We 
have  accomplished  a  number  of  milestones  leading  up  to  the 
present.  Just  last  August  we  achieved  what  the  Secretary  of  the 
Navy  directed  us  to  go  after  —  Spiral  1  completion  across  all  the 
nodes. 

The  next  thing  is  that  the  Navy  completed  a  CBA,  a  capabili- 
ties-based  assessment,  on  MDA.  The  CBA  looked  at  where  the 
Navy's  gaps  are  and  how  we  conduct  MDA  and  offered  up  a 
couple  of  solutions  that  will  allow  us  to  bridge  those  gaps. 

The  R3B,  the  Resources  and  Requirements  Review  Board, 
chaired  by  N8,  approved  the  findings  of  the  CBA  last  month.  The 
R3B  acknowledged  that  MDA  is  more  than  a  material  piece  —  it 
is  people,  training,  and  all  of  the  other  parts  of  the  enterprise. 

OPNAV  N3/5  (Information,  Plans  and  Strategy)  has  the  overall 
lead  for  MDA  for  Navy.  N3/5  will  be  working  with  the  fleet  on 
how  we  will  update  our  MDA  strategy.  N6  and  N2  are  the  pri¬ 
mary  resource  sponsors. 
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CHIPS:  The  war  on  terror  highlighted  the  need  to  provide  robust , 
high-speed  data  exchanges  with  coalition  forces.  Can  you  discuss 
improvements  made  to  the  Combined  Enterprise  Regional  Informa¬ 
tion  Exchange  System-Maritime. 

Vice  Adm.  Harris:  CENTRIXS  is  the  core  piece  that  we  use  to 
communicate  with  the  coalition.  We  are  pressing  ahead  to  im¬ 
prove  the  robustness,  reliability  and  speed  of  how  we  exchange 
data  with  our  coalition  partners  in  classified  and  unclassified 
domains. 

We  are  using  CENTRIX-M,  the  maritime  version/variant,  today 
in  a  wide  range  of  operations  around  the  world,  from  antipiracy 
operations  off  the  Horn  of  Africa  to  bilateral  missile  defense  test¬ 
ing  operations  in  the  Western  Pacific,  and  opportunities  in  South 
America,  the  U.S.  Southern  Command  area  of  responsibility. 

As  N6,  we  fund  the  Navy's  Pacific  Region  Network  Operations 
Center,  PRNOC,  in  Hawaii,  to  expand  those  contingency  capa¬ 
bilities.  We  are  pleased  with  how  we  are  moving  forward  with 
CENTRIXS.  CENTRIXS  is  just  one  part  of  the  overall  puzzle,  but  it 
is  an  important  piece  as  we  move  to  improve  our  communica¬ 
tions  with  our  coalition  partners. 

CHIPS:  With  the  push  to  consolidate  networks ,  implement  new  tech¬ 
nologies  and  communicate  globally  with  allies ,  partners  and  non¬ 
governmental  organizations ,  how  is  the  Navy  handling  the  band¬ 
width  requirements  which  must  be  increasing ? 

Vice  Adm.  Harris:  We  are  using  the  CBSP,  the  Commercial  Broad¬ 
band  Satellite  Program,  to  increase  our  bandwidth.  In  2007, 
some  folks  with  a  good  idea  conceived  it  as  our  Navy's  next  gen¬ 
eration  commercial  satellite  capability.  We  needed  something 
to  replace  the  leased  Commercial  Wideband  SATCOM  Program 
and  INMARSAT-Bravo. 

Compared  to  INMARSAT,  it  [CBSP]  gives  us  significant  im¬ 
provements.  INMARSAT  is  in  the  low  kilobyte  range,  64  to  128 
kilobytes.  CBSP  provides  up  to  3  megabytes  of  data  transfer. 

Initially,  when  you  put  it  on  some  of  the  small  platforms,  which 
desperately  need  something  like  this,  such  as  our  mine  counter¬ 
measure  ships,  frigates  and  coastal  patrol  boats,  they  are  going 
to  get  about  three  and  a  half  times  what  they  get  now.  That  is 
significant.  I  am  jazzed  up  about  CBSP.  I  think  it  is  a  good  deal. 

CHIPS:  Can  you  talk  about  Information  Operations? 

Vice  Adm.  Harris:  Part  of  my  tasking  from  CNO  is  to  look  at  10.  As 
we  look  at  the  CNO's  guidance  for  2009,  our  ability  to  achieve 
decision  superiority  is  essential  in  operating  at  all  levels  of  war. 

Broadly  speaking,  in  Information  Operations,  we  in  N6  are 
going  to  focus  on  three  different  areas.  First,  we  are  working 
hard  to  bring  high  10  capabilities  to  the  warfighter  in  cyber¬ 
space.  These  things  in  the  Naval  Networking  Environment  that  I 
keep  talking  about  are  critical  to  achieving  decision  superiority. 

In  the  10  mission  area  of  computer  network  operations, 
CNO,  and  the  element  of  computer  network  defense,  or  CND, 
are  essential  to  protecting  Navy  networks  and  operating 
establishments. 

Secondly,  our  10  portfolio  must  provide  asymmetric  capabili¬ 
ties  to  meet  maritime  challenges.  We  are  developing  strong  ties 
to  the  BMD,  Ballistic  Missile  Defense,  antisubmarine  warfare, 


ASW,  and  irregular  warfare  programs.  We  need  to  be  able  to 
meet  adversaries  with  asymmetric  capabilities  including  elec¬ 
tronic  warfare  and  computer  network  operations. 

Lastly,  we  are  working  hard  on  future  capabilities.  Looking 
forward  is  as  important  as  refining  and  polishing  where  we  are 
today.  So  let  me  talk  about  CANES,  the  Navy's  Consolidated 
Afloat  Networks  and  Enterprise  Services  program.  It  is  essential 
for  what  we  are  trying  to  do  in  the  NNE. 

CANES  will  reduce  our  physical  IT  infrastructure  on  ships.  We 
want  to  consolidate  afloat  network  infrastructure  and  core  ser¬ 
vices  for  the  Navy  to  better  operate  with  our  other  forces  and 
our  own  command  and  control. 

We  want  to  speed  effort  to  catch  the  current  wave  of  tech¬ 
nology.  That  includes  service  oriented  architectures,  enterprise 
solutions,  innovative  security  approaches  and  state-of-the-shelf 
hardware. 

At  the  end  of  the  day,  we  are  going  to  have  four  elements  of 
the  NNE.  NGEN  will  be  the  biggest  and  most  visible  piece  be¬ 
cause  it  will  affect  everyone  in  the  continental  U.S. 

We  will  have  CANES  interoperable  on  all  of  our  ships.  We  will 
have  BLII,  Base  Level  Information  Infrastructure,  or  ONE-NET, 
our  overseas  network.  Then  we  will  have  a  few  legacy  networks 
that  we  have  excepted  from  the  CARS  program.  CARS  goes  from 
more  than  1,000  legacy  networks  today  to  less  than  500  —  and 
ultimately  to  less  than  200. 

The  four  pillars  of  the  NNE  are:  CANES;  NGEN;  BLII  ONE-NET 
and  those  'excepted  networks.'  CANES  is  the  shipboard  piece. 

CHIPS:  What  do  you  mean  by  excepted  networks ? 

Vice  Adm.  Harris:  Those  legacy  networks  that  will  not  be  part 
of  NGEN.  Today,  we  would  say  that  they  are  not  part  of  NMCI. 
For  example,  if  you  were  to  e-mail  me  and  put  my  name  in  with 
the  Navy  dot-mil  domain,  the  @navy.mil  is  the  key  that  this  is  an 
NMCI  address  in  the  NMCI  domain. 

If  you  are  working  in  the  medical  profession  and  you  e-mail 
to  someone  @bumed. navy.mil,  BUMED  is  a  clue  that  there  are 
other  domains.  BUMED,  Bureau  of  Medicine  and  Surgery,  is  on  a 
different  legacy  network.  It  will  probably  be  an  excepted  legacy 
network  because  the  BUMED  network  carries  personal  data  re¬ 
lated  to  medical  and  health. 

We  have  an  obligation  to  protect  those  excepted  legacy  net¬ 
works  against  21st  century  cyber  threats  which  is  why  they  will 
be  'excepted  legacy'  and  included  into  the  NNE. 

Sharon,  let  me  conclude  this  interview  with  an  interesting 
point.  We  [N6]  are  only  a  part  of  the  Navy's  IT  picture.  The  NNFE, 
the  Naval  NETWAR  FORCEnet  Enterprise,  is  an  enterprise  ap¬ 
proach  to  how  we  govern  IT  in  the  Navy  writ  large. 

There  are  three  cornerstones  of  that  enterprise:  the  Navy's 
OPNAV  N6  (that's  me),  the  Naval  Network  Warfare  Command  in 
Norfolk,  commanded  by  Vice  Adm.  Denby  Starling,  and  SPAWAR, 
commanded  by  Rear  Adm.  Michael  Bachmann,  form  the  NNFE. 

I  don't  do  anything  without  coordinating  with  the  other  two 
corners  of  the  enterprise.  The  three  corners  of  the  enterprise 
look  at  the  operational  piece,  the  engineering  piece  and  the  fi¬ 
nancial  piece  —  in  other  words  —  what  we  do,  how  we  do  it, 
and  how  we  pay  for  it. 

It  is  a  team  effort;  IT  is  a  team  sport.  We  are  in  this  together, 
and  we  will  move  forward  together.  CHIPS 
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There's  an  age-old  adage:  There's 
no  limit  to  what  you  can  accom¬ 
plish  if  you  can  get  a  team  to  do 
the  work  together ,  and  early  re¬ 
sults  from  the  Cyber  Asset  Reduction  and 
Security  (CARS)  Task  Force  are  proof  of 
this  concept. 

Since  inception  in  October  2006,  the 
CARS  Task  Force  has  keenly  kept  its  sights 
on: 

/  Improving  the  Navy's  enterprise  se¬ 
curity  posture; 

/  Reducing  the  Navy's  information 
technology  footprint;  and 
/  Enforcing  enterprise  behavior  and 
preparing  the  way  for  the  Next  Gen¬ 
eration  Enterprise  Network  (NGEN)  and 
Naval  Networking  Environment  (NNE). 

Aggressive  efforts,  with  the  fleet;  sys¬ 
tems  commands;  personnel  and  training 
commands;  facilities;  higher  education 
commands;  and  all  other  major  Navy 
commands,  have  made  significant  prog¬ 
ress  in  attaining  the  Chief  of  Naval  Opera¬ 
tions'  goals  for  CARS  to  reduce  the  num¬ 
ber  of  Navy  legacy  networks. 

In  the  last  year,  the  CNO  accelerated  the 
timeline  for  reduction  from  September 
2011  to  September  2010  and  raised  the 
bar  for  total  network  reduction  from  51 
percent  to  90  percent! 

Enhancing  the  Navy's  Security  Posture 


According  to  Neal  Miller,  CARS  director, 
CARS  is  focused  on  improving  the  Navy's 
enterprise  security  posture.  "We  are 
eliminating  legacy  networks  ashore  by 
moving  their  capabilities  into  NMCI  (Navy 
Marine  Corps  Intranet)  or  ONE-NET,"  he 
said. 

"We're  also  taking  steps  to  ensure  that 
all  networks  allowed  to  remain  outside 
these  networks  are  just  as  secure  and  are 
efficiently  managed  following  common 
command  and  control  structures." 

Miller  added  that  his  team  is  working 
to  find  financial  efficiencies  and  help 
prepare  for  NGEN.  "This  could  not  be 


done  without  the  positive  support  of  our 
mission  partners  —  the  NMCI  and  ONE- 
NET  program  leads  and  the  Navy's  Echelon 
II  command  chief  information  officers." 

One  of  the  first  orders  of  business  for 
CARS  was  to  develop  written,  repeatable 
processes;  including  the  first-ever  Navy¬ 
wide  criteria  for  adjudicating  whether  a 
shore-based  system  or  application  should 
be  allowed  to  operate  outside  the  Navy's 
designated  enterprise  networks:  NMCI, 
ONE-NET  and  Integrated  Shipboard  Net¬ 
work  Systems  (IT-21). 

The  CARS  team  has  followed  processes, 
making  adjustments  and  refinements 
along  the  way.  Together  with  mission 
partners,  CARS  is  operating  as  smoothly 
as  a  well-oiled  machine  to  keep  this  com¬ 
plex  mission  on  track. 

To  illustrate  the  scope  of  this  effort, 
when  CARS  was  initiated,  the  Navy  had 
nearly  1,200  networks,  including  NMCI, 
ONE-NET  and  afloat  networks,  which 
make  up  just  12  of  the  1,200  total  net¬ 
works.  But  by  the  end  of  September  2008 
that  total  had  been  reduced  to  about  500, 
including  approximately  150  "excepted" 
networks,  or  networks  outside  the  NMCI 
enclave,  which  leaves  350  networks  to  be 
terminated  by  September  2010. 

By  summer  2008,  the  systematic  CARS 
case  development  process  identified  se¬ 
cure  enterprise  solutions  for  common 
applications  for  more  than  230  systems 
to  be  migrated  into  NMCI  and  ONE-NET. 
These  cases  were  far  enough  along  in  the 
planning  process  so  that  actual  migration 
timelines  were  established. 

CARS  and  Echelon  II  CIO  representa¬ 
tives  then  teamed  up  to  create  an  aggre¬ 
gate  network  termination  schedule  for 
200  networks  during  fiscal  year  2009. 

The  CARS  team  will  press  on  for  net¬ 
work  shutdown,  which  will  leave  approxi¬ 
mately  150  networks  to  be  terminated 
before  the  mission  completion  date  of 
September  2010. 

The  majority  of  these  cases  are  in  the 
NMCI  area  of  support,  and  common  solu¬ 
tions  are  being  applied  overseas  to  help 


transition  systems  into  ONE-NET. 

It  is  important  to  note  that  approxi¬ 
mately  half  of  the  Navy's  total  informa¬ 
tion  technology  infrastructure  is  in  place 
to  provide  capabilities  that  are  either  not 
supportable  in,  or  not  appropriate  to  be 
provided  by  an  enterprise  network. 

Examples  include  Navy  higher  educa¬ 
tion  networks  at  the  Naval  Academy,  War 
College  and  Postgraduate  School;  re¬ 
search,  development,  test  and  evaluation 
(RDT&E)  networks  operated  by  the  Navy's 
systems  commands;  high-speed  comput¬ 
ing  conducted  by  mainframe  computers 

CARS  will  transform  network 
management  into  a  mature  enterprise 
where  sound  investments  in  Navy 
IT  deliver  definitive  warfighting  and 
business  value  ... 


for  Navy  oceanographic  and  meteoro¬ 
logical  services;  and  selected  tactical  and 
training  networks  ashore. 

"Through  the  deliberate  CARS  process, 
all  excepted  networks  will  be  secured 
behind  an  approved,  centrally-managed 
information  assurance/computer  net¬ 
work  defense  (IA/CND)  suite,"  said  Charlie 
Kiriakou,  CARS  deputy  director  and  secu¬ 
rity  chief. 

"This  will  ensure  that  the  Navy's  entire 
IT  network  infrastructure  will  have  well 
understood  and  consistent  security  capa¬ 
bilities,  whether  it  is  in  NMCI,  IT-21,  ONE- 
NET  or  an  excepted  network,"  he  said. 

Previous  CARS  investments  have  accel¬ 
erated  transition  to  Web-based  organiza¬ 
tional  messaging  using  the  Navy  Regional 
Enterprise  Messaging  System  (NREMS); 
supported  accelerated  termination  of 
legacy  networks  overseas  (Guam  ONE- 
NET);  and  consolidated  enterprise  appli¬ 
cations  such  as  the  Federal  Logistics  Data 
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(FED  LOG)  and  Standard  Procurement 
System  (SPS). 

In  August  2007,  certification  and  ac¬ 
creditation  (C&A)  for  network  operations 
throughout  the  Navy  streamlined  CARS 
and  other  Navy  workflow  by  reducing  net 
cycle  time  in  the  C&A  process. 

Rob  Mawhinney,  Navy's  deputy  op¬ 
erational  designated  approval  author¬ 
ity  (ODAA)  and  deployment  lead  for 
C&A,  believes  that  the  process  improved 
risk  acceptance  decisions  by  the  ODAA 
through  higher  quality  C&A  documents. 

"This  process  is  not  only  a  positive  di¬ 
rection  for  CARS,"  Mawhinney  said,  "but 
for  commands  throughout  the  Navy  as 
well." 

Another  way  to  improve  quality  and  re¬ 
duce  the  timeline  for  completing  the  C&A 
process  is  to  deploy  a  software  tool  to 
help  automate  the  workflow  and  devel¬ 
opment  of  required  C&A  documentation. 

CARS  initiated  and  funded  an  acquisi¬ 
tion  effort  by  Program  Executive  Office 
Command,  Control,  Communications, 
Computers  and  Intelligence  (PEO  C4I) 
to  field  such  a  tool,  C&A  Support  Tool, 
or  CAST.  CAST  automates  the  C&A  pro¬ 
cess  from  registration  through  system 
decommissioning. 

If  you  use  a  commercial  software  ap¬ 
plication  for  preparing  your  income  tax 
return,  it's  easy  to  understand  the  value 


and  time-savings  that  a  similar  program 
can  do  for  the  C&A  process. 

"Classified  systems  that  have  not  had 
NMCI  seat  orders  placed  are  included  in  i 
the  network  shutdown  list,"  said  Lt.  Jessie  i 
Castillo,  deputy  director  for  the  CARS  op-  i 
erations  division.  < 

"Once  a  solution  is  identified  and  suffi¬ 
cient  progress  made  toward  implementa-  : 
tion,  CARS  and  the  NETWARCOM  director  < 
of  operations  may  allow  re-connection  of  i 
a  legacy  network."  I 

In  view  of  the  fiscal  realities  and  com-  ; 
plexity  of  the  mission,  the  CARS  team  has 
been  aggressively  working  to  balance  the  1 
need  for  demonstrating  tangible  results,  ; 
such  as  infrastructure  reductions,  security  ( 
improvements  and  savings  quickly,  with  I 
the  need  to  define  a  comprehensive  and  ( 
executable  plan  to  accomplish  its  mission 
on  or  ahead  of  schedule.  I 

"We  will  not  rush  to  failure,  nor  will  we  i 
allow  ourselves  to  fall  into  the  trap  of  1 
over-planning  and  resultant  lack  of  posi-  ; 
tive  action,"  said  Clifford  Bussey,  CARS  op¬ 
erations  officer.  I 

"Prudent  operational  risk  must  be  i 
accepted  while  adhering  to  the  need  i 
to  reduce,  consolidate  and  secure  our  \ 
networks.  We  also  need  to  track  the  fi-  < 
nancial  savings  when  we  deliver  operat-  ; 
ing  efficiencies  to  support  realignment  . 
decisions."  < 

Figure  1 .  Fiscal  Year  2009  Targeted  Network  Projections. 


Setting  the  Stage  for  NGEN  and  NNE 


One  of  the  greatest  challenges  fac¬ 
ing  the  Navy's  shore  IT  leaders  is  reduc¬ 
ing  costs  for  operating  and  maintaining 
major  business  and  warfighting  comput¬ 
er  systems  without  reducing  readiness. 

Implementing  maturing  technologies, 
such  as  server  virtualization  and  consoli¬ 
dating  systems  into  fewer  physical  host¬ 
ing  locations,  are  key  elements  of  the  new 
Navy  Server/Application  Hosting  Center 
strategy. 

CARS  has  begun  implementation  in 
three  locations  already,  including  Space 
and  Naval  Warfare  (SPAWAR)  Systems 
Center  sites  in  New  Orleans  and  San 
Diego,  and  a  Bureau  of  Naval  Personnel 
(BUPERS)  site  in  Millington,  Tenn. 

The  next  steps  include  build  out  of 
backup  capability  for  the  Millington  site 
at  Great  Lakes,  III.,  and  initial  exploration 
for  expansion  sites  in  Patuxent  River,  Md., 
and  Bremerton,  Wash. 

The  strategy  includes  leveraging  joint 
hosting  capacity  at  large  Defense  Infor¬ 
mation  Systems  Agency  (DISA)  comput¬ 
ing  centers.  The  first  one  with  major  Navy 
users  is  in  Mechanicsburg,  Pa.,  other  lo¬ 
cations  include:  Norfolk,  Va.;  and  over¬ 
seas  locations  in  Naples,  Italy;  Yokosuka, 
Japan;  and  Bahrain.  Planned  projects  are 
summarized  in  Figure  1. 
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As  these  sites  are  activated,  many  exist¬ 
ing  Navy  systems  will  be  relocated  from 
their  current  widely  dispersed  sites  into 
one  of  the  consolidated  hosting  locations. 

In  addition  to  reduced  total  costs  and 
being  more  environmentally  friendly,  the 
primary  benefits  of  executing  this  strat¬ 
egy  include  significant  improvements  in 
the  Navy's  disaster  recovery  and  continu¬ 
ity  of  operations  capabilities;  improved 
ability  to  defend  our  key  information  sys¬ 
tems  and  the  data  exchanged  on  them; 
and  an  increase  in  the  speed  to  capability 
to  bring  new  systems  on  line  securely. 

"The  overall  effort  includes  seeking 
most  efficient  operations  as  well  as  iden¬ 
tifying  appropriate  cost-sharing  method- 


"We  will  not  rush  to  failure,  nor  will 
we  allow  ourselves  to  fall  into  the 
trap  of  over-planning  and  resultant 
lack  of  positive  action.  Prudent 
operational  risk  must  be  accepted 
while  adhering  to  the  need  to  reduce, 
consolidate  and  secure  our  networks. 
We  also  need  to  track  the  financial 
savings  when  we  deliver  operating 
efficiencies  to  support  realignment 
decisions." 

Clifford  Bussey 
CARS  operations  officer 


ology  for  data  centers  that  host  applica¬ 
tions  owned  by  more  than  one  Echelon  II 
command,"  Kiriakou  said. 

"In  parallel  with  consolidating  the  data 
centers,  Navy  is  taking  positive  steps  for 
phased  consolidation  of  our  Web  por¬ 
tals,"  Kiriakou  added.  "These  services 
will  eventually  be  provided  via  Defense 
Knowledge  Online." 

The  effort  is  starting  with  migration  of 
the  U.S.  Fleet  Forces  Command's  Share- 
Point  classified  and  unclassified  portals 
to  a  DISA  computing  center  in  Mechan- 
icsburg.  CARS  is  also  implementing  con¬ 
solidation  of  the  Navy's  public-facing 
Web  services  to  a  DISA  computing  center 
in  conjunction  with  implementation  of 
DoD-level  information  assurance  demili¬ 
tarized  zones,  also  called  proxy  services 
and  screened  subnets.  This  is  to  ensure 
that  the  assurance  of  one  system  is  not 
undermined  by  the  vulnerabilities  of  in¬ 
terconnected  systems. 


"A  plan  of  action  and  milestones 
(POA&M)  for  purging  enterprise  service 
capabilities  from  networks  that  have  at¬ 
tained  initial  approval  as  excepted  net¬ 
works  will  be  executed  this  year,"  Bussey 
said. 

"I'd  especially  like  to  recognize  Naval 
Facilities  Engineering  Command  and  the 
Naval  Education  and  Training  Command 
for  timely  completion  of  their  POA&Ms, 
and  we  are  looking  forward  to  helping 
them  execute  them  to  meet  all  require¬ 
ments  for  final  approval." 

The  CARS  area  of  responsibility  is  glob¬ 
al,  so  CARS  has  been  working  hand-in- 
hand  with  the  ONE-NET  program  to  facili¬ 
tate  enforcement  of  that  network  as  the 
Navy's  designated  enterprise  overseas 
network.  This  includes  coordination  of 
asset  and  network  discovery  for  overseas 
networks  not  presently  in  ONE-NET  and 
developing  engineering  plans  for  them 
to  migrate  to  ONE-NET. 

Supporting  Governance 


"Another  area  we  are  supporting  is  the 
emerging  governance  and  architecture 
plans  to  enforce  a  consistent  approach 
for  network  service  types  to  support  the 
Maritime  Headquarters  with  Maritime 
Operations  Centers,"  Castillo  said. 

"Additionally,  common  themes  among 
the  approved  excepted  networks  will  be 
used  to  ensure  full  awareness  of  the  po¬ 
tential  scope  of  services  required  to  be 
provided  under  the  Navy's  Next  Genera¬ 
tion  Enterprise  Network,"  he  continued. 

"Overall,  CARS  is  on  schedule,"  Miller 
explained.  "We  have  a  much  better  un¬ 
derstanding  of  the  detailed  scope  of 
networks,  applications  and  systems  that 
will  be  needed  to  transition  to  NGEN,  and 
we  are  ahead  of  the  game  on  network 
terminations. 

"We've  made  great  progress  with  re¬ 
ducing  workload  for  completing  secu¬ 
rity  efforts  begun  under  Cyber  Condition 
Zebra  with  metropolitan  area  network 
purifications  and  security.  However,  we 
have  not  made  as  much  progress  as  I'd 
like  in  a  few  areas,  including  establishing 
Navywide  processes  and  tools  for  IT  asset 
management,"  Miller  continued. 

"Our  focus  remains  on  finding  a  bal¬ 
ance  between  improving  security  and 
delivering  cost-effective  enterprise  so¬ 
lutions,  but  the  new  normal  for  security 
posture,  demanded  by  Joint  Task  Force- 


Aggressive  efforts,  with  the 
fleet;  systems  commands^ 
personnel  and  training 
commands;  facil|^9hid^^ 
education  comm  a  n  dsj^Urcfl^ 


Global  Network  Operations  (JTF-GNO), 
has  driven  us  to  implement  a  few  course 
corrections  to  respond  to  a  very  dynamic 
network  operations  and  defense  environ¬ 
ment  across  the  DoD,"  Miller  said. 

He  added  that,  "Active  collaboration, 
with  NMCI,  ONE-NET  and  NGEN  programs 
and  all  the  Navy's  Echelon  Ms,  is  allowing 
us  to  concentrate  efforts  to  meet  real¬ 
time  operational  demands  to  improve 
our  security  posture  through  deploying 
technologies,  such  as  Host  Based  Secu¬ 
rity  System  and  data  at  rest,  while  also 
making  real  progress  to  set  the  stage  for 
NGEN/NNE  through  initial  deployments 
of  IT  asset  management  and  Data  and  Ap¬ 
plication  Hosting  Centers." 

Miller  credited  CARS  mission  partners 
for  the  current  level  of  success  achieved. 

"Together,  we  will  accomplish  the 
CNO's  goals,  improve  [the]  Navywide  se¬ 
curity  posture,  [and]  identify  and  lever¬ 
age  efficiencies,"  Miller  concluded. 

"We  will  transform  Navy  IT  from  a  feder¬ 
ated  to  a  mature  enterprise  where  sound 
investments  in  IT  deliver  definitive  war¬ 
fighting  and  business  value."  CHIPS 


George  Bieber  is  the  editor  of  InfoDomain,  the 
professional  magazine  of  Naval  Network  Warfare 
Command.  This  article  was  reprinted  courtesy  of 
NETWARCOM  and  edited  from  the  original  article 
published  in  the  Winter  2008-2009  edition  of  Info 
Domain. 
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Trident  Warrior  2009  Completes  Spiral  1  Experimentation 


Improving  maritime  technologies  for  better  security  and  communications 


By  Trident  Warrior  /  OLC2  Public  Affairs 

More  than  60  U.S.  and  coalition  person¬ 
nel  participated  in  the  first  of  a  series  of 
experiments  at  the  Navy's  newly  inaugu¬ 
rated  Maritime  Operations  Center-Exper¬ 
imental  (MOC-X)  facility  on  the  Norfolk 
Naval  Station,  Feb  2-5,  2009.  The  event 
was  the  first  of  three  parts,  or  Spirals,  in 
the  Trident  Warrior  2009  /  Operational 
Level  Command  and  Control  (TW09  / 
OLC2)  experiment  involving  critical  oper¬ 
ational  level  processes  and  maritime  tech¬ 
nologies  within  maritime  headquarters. 

The  theme  of  TW09  /  OLC2  is  building 
maritime  partnerships  for  regional  sta¬ 
bility,  and  the  primary  goal  is  to  improve 
maritime  security  between  U.S.  and  mul¬ 
tinational  partners. 

"TW09  /  OLC2  is  a  great  opportunity  to 
bring  everyone  together  in  a  controlled 
environment  to  explore  experimental 
concepts  and  technologies  compat¬ 
ible  with  warfighter  needs,"  said  Capt. 
Carl  Conti,  director  of  Naval  Network 
Warfare  Command's  Innovation  and 
Experimentation. 

"TW09  /  OLC2  will  leverage  the  capa¬ 
bilities  of  a  global  maritime  partnership 
along  with  the  processes,  procedures  and 
emerging  tools  to  reduce  uncertainty  and 
speed  decision-making,"  said  Capt.  San¬ 
ford  "Sandy"  Lansing,  director  for  experi¬ 
mentation,  Navy  Warfare  Development 
Command.  "This  will  improve  maritime 
security  among  all  the  partners." 

Spiral  One  focused  on  the  intelligence 
preparation  of  the  operational  environ¬ 
ment.  Participants  received  an  initial 
comprehensive  scene-setter  briefing  with 
daily  intelligence  updates  based  on  the 
current  real-world  political,  military  and 
economic  situation  throughout  the  Atlan¬ 
tic,  including  the  Caribbean,  North  Atlan¬ 
tic,  West  Africa  and  Gulf  of  Guinea,  where 
U.S.  and  coalition  participants  currently 
operate. 

The  scenario  presented  problems  to 
challenge  warfighters  in  the  areas  of  mar¬ 
itime  situational  awareness,  information 
operations,  seabasing  and  logistics,  and 
MOC-to-MOC  collaboration  requirements 
and  processes. 

The  coalition  MOC  participants  includ¬ 
ed  Canada,  Finland,  France,  Portugal  and 


the  United  Kingdom  (MOC  and  NATO 
Maritime  Command  Component)  and 
U.S.  participants  from  2nd  Fleet,  4th  Fleet, 
the  U.S.  Coast  Guard  and  the  Office  of 
Naval  Intelligence. 

"This  year's  experiment  included  evalu¬ 
ation  of  operational  processes  and  pro¬ 
cedures  along  with  technical  solutions  to 
provide  feedback  to  the  fleets,"  said  Capt. 
Steve  Snyder,  MOC  project  team  director. 

"We  continue  to  look  at  fleet  require¬ 
ments  and  solutions  involving  stan¬ 
dardization,  examining  hybrid  warfare, 
irregular  warfare  and  technologies  that 
will  benefit  U.S.  MOCs,  as  well  as  partner 
nation  MOCs,"  he  added.  "Aligning  with 
partners  and  allies  is  essential  in  creating 
globally  networked  MOCs." 


U.S.  Navy  Cmdr.  Patti  Enright,  2nd 
Fleet  team  lead  for  developing 
intelligence  preparation  for  the 
operational  environment,  confers 
with  Royal  Navy  Cmdr.  Andy  Elvin, 

MOC-to-MOC  Coalition,  and  Royal 
Australian  Navy  Cmdr.  Michael 
C.  Doherty,  working  maritime 
situational  awareness.  Elvin  and 
Doherty,  foreign  exchange  officers 
assigned  to  Navy  Warfare  Develop¬ 
ment  Command,  participated  in 
the  Spiral  One  experiment.  Photo 
by  Mass  Communication  Specialist 
2nd  Class  Kristopher  Wilson. 

This  experiment  was  enhanced  through 
the  utilization  of  MOC-X,  a  state-of-the- 
art,  scalable,  flexible  and  highly  adapt¬ 
able  multi-mission  venue. 

This  Navy  asset,  which  achieved  ini¬ 
tial  operational  capability  in  September 
2008,  is  used  for  operational-level  com¬ 
mand  and  control  experimentation  for 
the  Navy,  multinational,  interagency, 
nongovernmental  and  other  governmen¬ 
tal  agency  partners  in  either  a  linked  or 
isolated  environment. 

MOC-X  enables  the  Navy  to  validate 
concepts  of  operations  and  operational 
level  capability  solutions  with  the  ability 
to  address  immediate  challenges  without 
impacting  operational  MOCs,  emerging 
missions  and/or  networks,  including  pro¬ 


cedures,  network  capabilities  and  tactical 
communications. 

"During  Spiral  One,  we  used  a  seabas¬ 
ing  scenario  to  conduct  initial  planning 
for  forward  deployed  operations  at  sea 
and  the  logistic  support  necessary  for  sus¬ 
tained  operations.  In  subsequent  phases, 
we  will  bring  in  allied  plans  and  capabili¬ 
ties  for  mutual  support,"  said  Capt.  Dorian 
Jones,  operational  agent  for  the  Spiral 
One  experiment.  The  experiment  sce¬ 
nario  made  use  of  real-world  situations 
with  minor  modifications  to  stimulate  the 
interactions  we  needed  to  explore." 

Coalition  partners  also  had  specific 
objectives  for  participation  in  the  experi¬ 
ment.  Several,  including  the  United  King¬ 
dom  and  Portugal,  are  looking  to  improve 
current  collaboration  and  information 
sharing  in  the  operational  environment. 

Finland  is  using  the  experiment  pro¬ 
cess  as  a  means  to  evaluate  MOC-to-MOC 
standard  operating  procedures.  France 
also  participated  in  the  planning  process 


and  identified  several  keys  for  collabora¬ 
tion  to  deter  drug  trafficking,  weapons 
smuggling  and  terrorist  threats. 

TW09  /  OLC2  is  a  series  of  experiments 
designed  to  examine  technologies  and 
refine,  develop,  test  and  explore  capa¬ 
bilities  to  close  gaps  in  the  MOC-to-MOC 
core  operational  level  of  command  and 
control. 

TW  09  is  directed  by  NETWARCOM  and 
sponsored  by  Commander,  Second  Fleet. 
The  Navy  Warfare  Development  Com¬ 
mand  is  supporting  the  series  of  OLC2 
experiments.  CHIPS 


For  more  information  contact  NETWARCOM  public 
affairs  at  (757)  417-6706. 
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Italian  Navy  Admiral  Luciano  Zappata 
North  Atlantic  Treaty  Organization 
Deputy  Supreme  Allied  Commander  Transformation 

Adm.  Luciano  Zappata  graduated  from  Italy's  Naval  Academy  in  Livorno,  Italy,  and  was  commissioned  an 
ensign  in  May  1970.  The  admiral's  naval  experience  is  extensive,  having  served  on  submarines,  destroyers, 
frigates,  and  in  weapons,  combat  systems,  staff  and  operational  positions. 

From  1987  to  1988,  he  served  as  commanding  officer  of  the  frigate  Espero,  participating  in  escort  opera¬ 
tions  to  Italian  merchant  shipping  in  the  Persian  Gulf. 

From  1992  to  1993,  he  served  as  commanding  officer  of  the  cruiser  Vittorio  Veneto,  participating  in  Op¬ 
eration  Restore  Hope  in  Somalia  and  NATO  and  Western  European  Union  operations  in  the  former  Yugo¬ 
slavia  as  flagship  of  the  NATO  Commander,  Standing  Naval  Force  Mediterranean. 

Promoted  to  rear  admiral  in  December  1996,  he  held  the  position  of  Commander  of  the  Second  (Blue 
Water)  and  Third  (Amphibious)  Naval  Divisions,  and  CTG  621.01  (Italian  Carrier  Battlegroup)  during  Operation  Allied  Force  -  Kosovo. 
He  subsequently  held  various  positions,  including  assistant  head  of  the  Navy  Development  Department,  Chief  of  Staff  of  Com¬ 
mander  in  Chief  Naval  Fleet  and  Vice  Inspector  for  Naval  Logistics  Support. 

In  January  2005,  he  was  promoted  to  vice  admiral  and  served  first  as  Navy  Chief  of  Staff  Advisor  and  then  as  Deputy  Chief  of  Staff 
of  the  Italian  Navy.  His  most  recent  tour  was  Advisor  to  the  Chief  of  Staff  of  the  Italian  Defence. 

He  was  promoted  to  admiral  in  June  2007  and  assumed  the  position  of  Deputy  Supreme  Allied  Commander  Transformation  July 
2,  2007. 


Adm.  Luciano  Zappata 


ACT  is  NATO's  leading  agent  for  change;  enabling,  facilitating  and  advocating  continuous  improvement  of  military  capabilities  to 
enhance  the  military  interoperability,  relevance  and  effectiveness  of  the  NATO  alliance.  CHIPS  met  with  Adm.  Zappata  in  February 
at  ACT  headquarters  in  Norfolk,  Va.,  to  discuss  some  of  ACT's  initiatives  and  challenges. 


CHIPS:  What  key  projects  has  Allied  Command  Transformation  un¬ 
dertaken  recently  that  may  impact  maritime  security? 

Adm.  Zappata:  In  NATO,  we  have  launched  in  the  last  year  a 
project  called  Multiple  Futures.  We  expect  this  project  will  sup¬ 
port  NATO  as  it  begins  discussions  on  what  could  be  the  Alli¬ 
ance's  next  future  strategic  concept.  The  existing  future  con¬ 
cept  we  have  from  NATO  is  a  bit  old  —  from  1999.  The  world  has 
changed  and  will  continue  to  change.  NATO  is  now  involved  in 
operations  in  Afghanistan.  There  are  many  new  situations  that 
must  be  considered. 

We  were  excited  at  the  idea  of  starting  this  Multiple  Futures 
Project  to  understand  and  to  raise  the  caliber  of  discussion 
about  the  possible  future  security  environment  inside  NATO  and 
to  provide  a  sound  basis  for  more  such  discussions  at  the  politi¬ 
cal  and  military  levels. 

This  project  will  influence  security  discussions  and  further 
work  within  the  Alliance  and  possibly  those  nations  outside  of 
the  Alliance.  Our  aim  is  to  try  to  influence  the  definition  of  the 
future  military  challenges  —  this  is  how  we  will  be  shaping  new 
ideas  in  NATO.  In  the  Multiple  Futures  Project,  we  have  identi¬ 
fied  many  drivers  of  change,  from  the  growth  of  populations  to 
scarcity  of  resources  and  climate  change. 

For  example,  if  you  look  at  the  existing  work  from  the  High 
North  (Seminar  on  Security  Prospects  in  the  High  North)  dis¬ 
cussions  going  on  in  Iceland,  northern  countries,  like  Russia, 
Denmark,  Canada,  the  United  States  and  all  the  surrounding 
countries,  we  are  discovering  new  innovations  because  new  op¬ 


portunities,  like  new  sea  routes  and  the  possibility  of  exploiting 
the  bottom  of  the  seas'  resources,  are  opening  up. 

One  of  the  results  we  see  from  this  Multiple  Futures  Project 
is  the  importance  of  the  maritime  dimension  to  NATO.  Both  of 
NATO's  strategic  commanders,  General  James  Mattis  and  Gen¬ 
eral  John  Craddock,  have  underscored  the  importance  of  the 
maritime  dimension  and  are  working  with  the  nations  at  the 
NATO  headquarters  to  agree  on  a  sound  way  ahead  to  define  a 
Maritime  Strategy  and  a  Maritime  Security  Operations  concept. 
So  far  the  reactions  from  the  nations  are  very  positive. 

CHIPS:  What  is  the  focus  of  NATO's  new  maritime  strategy? 

Adm.  Zappata:  We  cannot  understand  with  perfect  clarity  what 
the  future  will  hold,  but  two  ideas  are  important.  The  first  is 
flexibility.  Freedom  of  the  seas  when  operating  in  international 
waters  allows  you  to  position  your  fleets  wherever  you  want  at 
relatively  short  notice. 

You  can  be  present  in  areas  of  the  world  far  from  your  home- 
ports  with  significant  military,  political,  diplomatic  effects.  You 
can  cause  other  nations  to  be  aware  of  your  presence  —  or  not 
—  if  you  don't  want  to.  You  can  also  establish  a  limited  foot¬ 
print  ashore  when  needed.  That's  flexibility.  As  an  example,  let's 
talk  about  missile  defense.  You  have  states  with  the  potential 
to  threaten  our  countries  with  missiles.  Seas  provide  freedom 
of  movement  for  ships  and  naval  platforms,  which  can  operate 
over  the  horizon.  No  one  knows  that  you  are  there,  and  you  can 
sail  a  task  force  ready  to  react  and  be  well-prepared. 
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The  Multiple  Futures  Project  team  has  built  an  Intellectual  Framework  that  identifies  relevant 
Drivers  of  change  that  includes  several  plausible  Futures.  The  team  has  been  successful  using  the 
framework  to  focus  thinking  and  improve  understanding  of  how  the  world  may  change.  From  this  un¬ 
derstanding,  we  are  better  able  to  deduce  the  strategic-military  implications.  These  implications  will 
be  used  to  develop  the  best  possible  military  advice  for  the  Alliance  and  better  inform  the  defense 
planning  processes. 

The  title  of  the  MFP  refers  to  the  future  in  general,  not  in  military  or  security  terms  in  particular. 
The  MFP  is  committed  to  providing  the  best  possible  military  advice.  But  providing  advice  on  military 
and  security  matters  in  the  long-term  perspective  necessitates  analyzing  the  future  in  broad  terms, 
including  the  natural,  political  and  social  dimensions. 

These  dimensions  combine  to  shape  the  various  multiple  futures  the  Alliance  might  face.  Each  of 
these  futures  contains  a  varied  set  of  security  and  military  challenges  from  which  the  team  will  ana¬ 
lyze  future  security  challenges  within  a  broad  perspective,  using  well-known  and  well-established 
academic,  private  sector  and  military  methodologies. 

The  MFP  aims  to  create  the  basis  for  a  strategic  dialogue  within  the  Alliance  -  about  future  chal¬ 
lenges,  their  relative  nature  and  gravity,  and  how  the  Alliance  should  respond  to  these  challenges. 
The  intent  with  the  MFP  is  not  to  predict  the  future  of  the  Alliance;  rather  the  intent  is  to  create  a 
basis  for  strategic  dialogue. 


Deputy  Supreme  Allied  Commander  Transformation  Italian 
Navy  Adm.  Luciano  Zappata  with  Executive  Assistant  Italian 
Navy  Capt.  Paolo  Pezzutti  at  ACT  headquarters  in  Norfolk,  Va. 
Feb.  18,  2009. 


The  second  idea  is  inclusiveness.  NATO  has  discovered  the 
importance  of  taking  a  comprehensive  approach  toward  all  the 
other  actors  at  sea.  We  cannot  ignore  shipping  companies;  the 
International  Maritime  Organization;  nongovernment  organiza¬ 
tions;  and  the  United  Nations. 

There  are  many  different  non-NATO  nations  to  take  into  ac¬ 
count  that  are  sending  their  ships  to  protect  their  own  vessels 
from  piracy.  NATO  should  be  more  inclusive.  We  should  be  able 
to  work  with  the  other  actors  to  find  solutions  for  the  future,  es¬ 
pecially  when  we  share  the  same  challenges  and  consider  the 
complex  international  legal  framework. 

For  me,  flexibility  and  inclusiveness  are  key  ideas  behind  a 
new  maritime  strategy. 

CHIPS:  How  does  this  ploy  into  NATO's  role  with  other  world  organi¬ 
zations  such  as  the  UN  and  European  Union? 

Adm.  Zappata:  The  United  Nations  and  the  European  Union  are 
two  different  organizations.  Given  the  financial  problems  we  are 
facing  and  given  the  globalized  world,  it  is  my  professional  view 
that  if  European  Union  nations  want  to  remain  relevant  in  the 
future,  they  must  work  together.  The  contributions  by  individual 
European  Union  nations  to  NATO  are  significant. 

My  idea,  however,  is  that  the  European  Union  could  increase 
its  role  and  influence  within  NATO  if  there  were  more  unity  and 
cooperation  among  nations.  There  are  many  ongoing  initiatives 
in  this  respect,  but  there  is  a  long  way  to  go. 

The  United  Nations  is  a  very  inclusive  organization.  That  is  why 
it  is  important  for  NATO  to  increase  the  relationships  with  the 
United  Nations.  I  believe  we  can  provide  the  United  Nations  with 
great  support. 

One  of  the  characteristics  of  NATO  is  that  NATO  is  the  only  ex¬ 
isting  alliance  with  a  military  structure  that  includes  a  standing 
command  and  control  organization.  This  could  be  valuable  to 
the  United  Nations  for  many  reasons,  starting  for  example,  with 
situations  where  we  might  provide  aid  to  a  disaster  or  other  hu¬ 
manitarian  crisis. 

This  builds  trust  and  confidence  in  the  UN  and  NATO,  while  at 


the  same  time  providing,  in  some  situations,  the  command  and 
control  tools  that  the  UN  needs  to  be  effective.  It  is  difficult  to 
do  this  because  there  are  usually  many  sensitive  political  points 
that  may  be  hard  to  overcome,  but  it  is  a  field  of  opportunity 
that  we  have  to  exploit  in  the  operational  community. 


“One  of  the  characteristics  of  NATO  is  that  NATO  is  the  only 
existing  alliance  with  a  military  structure  that  includes  a 
standing  command  and  control  organization.” 

Italian  Navy  Adm.  Luciano  Zappata 


CHIPS:  How  has  cyber  operations  challenged  NATO's  approach  to 
maritime  strategy?  Is  it  something  you  recognize  within  NATO? 

Adm.  Zappata:  The  answer,  of  course,  is  yes.  Cyber  needs  to  be 
defined  because  it  is  a  completely  new  dimension.  Because  I  am 
a  sailor,  I  think  the  characteristics  of  this  dimension  are  like  an 
ocean.  The  waves  are  electromagnetic  waves  in  electromagnet¬ 
ic  space.  Information  technology  has  given  us  'cyber'  ships  and 
vessels  —  a  way  to  use  this  electromagnetic  space  —  media, 
radio  and  TV. 

Cyberspace  has  some  very  important  characteristics.  First  of 
all,  you  move  at  the  speed  of  light.  There  is  no  relevance  of  space 
or  physical  dimensions.  You  can  talk  to  whoever  you  want  with 
a  simple  click  or  using  a  cell  phone.  Distance  as  a  dimension  is 
irrelevant. 

The  flow  of  data  or  amount  of  data  depends  only  on  band¬ 
width  or  the  dimension  of  the  cyber  ship.  Cyberspace  provides 
both  opportunity  and  risk  for  both  bad  and  good  guys. 

Whenever  you  sail  in  this  cyber  ocean,  you  can  find  criminals, 
pirates  and  opponents.  In  cyberspace,  the  power  of  nations 
doesn't  matter.  You  can  be  the  most  powerful  nation  in  the  world, 
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and  you  can  be  threatened  by  a  few  well-prepared  hackers.  Our 
enemies  are  able  to  exploit  weaknesses  in  this  critical  field.  This 
is  particularly  important  for  the  Western  countries  and  for  NATO 
because  we  rely  heavily  on  information  technology.  What  if  our 
adversaries  were  able  to  disrupt  this  flow  of  information  or  break 
into  classified  systems? 

Of  course,  we  have  specific  ways  of  protecting  our  networks 
and  communications,  but  it  is  a  continuous  challenge.  The  more 
we  want  to  use  cyberspace  to  exploit  all  these  opportunities, 
the  more  we  are  at  risk  of  being  attacked  by  others. 

Cyberspace  is  another  dimension  that  the  Multiple  Futures 
Project  addresses  as  critically  important  for  its  security  and  mili¬ 
tary  implications.  NATO  will  have  to  take  into  account  this  view. 

CHIPS:  Can  you  talk  about  some  other  top  initiatives  for  NATO? 

Adm.  Zappata:  Setting  aside  NATO's  operations,  such  as  the  In¬ 
ternational  Security  Assistance  Force  in  Afghanistan  for  a  mo¬ 
ment,  I  find  one  of  NATO's  most  future  looking  actions  to  be  the 
NATO  Training  Cooperation  Initiative.  It  was  established  as  a  way 
of  sharing  allied  training  expertise  with  Mediterranean  Dialogue 
(MD)  and  Istanbul  Cooperation  Initiative  (ICI)  partners  from  the 
broader  Middle  East. 

To  this  end,  NATO  intends  to  build  an  expanding  network  of 
NATO  training  activities  that  will  modernize  defense  structures 
and  train  security  forces.  This  initiative  is  part  of  the  Alliance's 
continuing  transformation  of  its  capabilities  and  relationships  in 
response  to  an  evermore  complex  security  environment. 

I  have  made  many  trips  to  MD/ICI  countries,  in  order  to  de¬ 
scribe  to  them  who  we  are,  what  we  do,  and  to  exchange  our 
views  with  them.  I  have  always  found  these  countries  very  open 
to  improve  the  reciprocal  understanding  of  culture. 

These  nations  are  willing  to  increase  the  dialogue  and  the  re¬ 
lationship  with  NATO,  which  is  essential  to  build  trust  and  con¬ 
tribute  effectively  to  improve  the  stability  of  the  area.  This  initia¬ 
tive  from  NATO  is  very  important  and  should  be  taken  up  further 
by  the  Alliance. 

In  many  situations,  like  piracy  and  other  maritime  issues,  we 
can  be  inclusive  and  ask  other  nations  to  join  us  and  defend  the 
freedom  of  the  seas,  which  is  in  the  interest  of  everybody.  The 
contribution  of  these  countries  is  vital  to  be  successful. 

CHIPS:  How  is  technology  used  to  share  information  between  coun¬ 
tries  during  operations  or  training  exercises? 

Adm.  Zappata:  The  exchange  of  information  is  the  basis  of  in¬ 
teroperability.  Interoperability  is  a  keyword  because  NATO  is  an 
organization  composed  of  nations  that  have  different  tools  and 
different  systems. 

Nations  want  to  be  free  to  make  the  choices  they  want,  and 
autonomous  in  deciding  what  systems  or  equipment  to  buy.  In¬ 
teroperability  is  based  on  defining  and  agreeing  on  a  common 
set  of  standards  or  rules  and  ways  of  delivering  these  common 
services. 

It  is  a  continuous  circle,  in  technology  and  in  the  real  world, 
things  develop  day-by-day  in  communication  systems.  Interop¬ 
erability  is  not  something  you  can  buy  on  the  market;  it  is  a  pro¬ 
cess  —  a  continuous  effort. 

The  foundation  of  interoperability  is  the  will  of  the  nations  to 


NATO  Training  Cooperation  Initiative 

NATO  Training  Cooperation  Initiative  is  away  of  sharing  allied  training  expertise 
with  Mediterranean  Dialogue  (MD)  and  Istanbul  Cooperation  Initiative  (ICI)  partners 
from  the  broader  Middle  East.  To  this  end,  NATO  intends  to  build  an  expanding 
network  of  NATO  training  activities  that  will  modernize  defense  structures  and  train 
security  forces  through  an  evolutionary  and  phased  approach. 

This  initiative  is  part  of  the  Alliance’s  continuing  transformation  of  its  capabilities 
and  relationships  in  response  to  an  evermore  complex  security  environment.  Today, 
NATO  is  engaged  in  operations  and  missions  across  three  continents  ranging  from 
crisis  response  operations  to  training  missions  and  disaster  and  humanitarian  relief 
operations. 

In  addition,  the  alliance  maintains  partnerships,  dialogue  and  cooperation  at 
varying  levels  of  intensity  with  close  to  40  countries,  making  the  family  of  allies  and 
partners  a  group  that  comprises  one-third  of  United  Nations  member  states.  NATO 
is  pursuing  ever-closer  cooperation  with  other  international  and  nongovernmental 
organizations,  both  at  the  strategic  level  and  in  theater. 


be  interoperable.  There  is  an  organizational  aspect  of  how  to 
achieve  and  maintain  this  interoperability.  We  agree  as  NATO  na¬ 
tions  to  exchange  and  share  information.  That  is  one  of  the  basic 
goals.  This  is  where  we  still  have  a  lot  to  improve. 

While  the  command  and  control  organization  may  be  a  NATO 
task  force,  and  the  commanding  officer  may  be  from  NATO,  it  is 
the  NATO  nations  which  provide  the  forces  on  the  field.  Trans¬ 
formation  happens  in  the  nations.  The  nations  buy  the  systems, 
and  they  educate  and  train  their  soldiers.  This  is  one  of  the  im¬ 
portant  goals  of  ACT:  to  be  able  to  address  the  nations  and  give 
them  proper  advice. 

When  I  came  here,  I  heard  that  ACT  was  the  forcing  agent  for 
transformation.  I  did  not  like  the  term  'forcing  agent'  from  the 
beginning  because  to  force  you  must  have  authority,  you  must 
have  tools  and  a  way  of  enforcing.  This  cannot  work  in  NATO. 

At  ACT,  we  now  consider  ourselves  to  be  the  leading  agent  for 
transformation.  Leading  means  having  ability  [and]  good  ideas, 
indicating  to  nations  the  way  they  should  move  ahead.  We  can 
help  nations  prepare  their  armed  forces  for  the  future  while 
keeping  this  great  value  of  interoperability. 

We  have  achieved  good  results  with  interoperability  —  espe¬ 
cially  in  our  navies.  I  say  that  from  a  personal  point  of  view  be¬ 
cause  of  my  experiences  at  sea.  We  still  have  to  work  to  improve, 
especially  with  the  armies,  because  in  the  Cold  War  armies  were 
not  expeditionary  in  nature.  This  is  new  for  NATO. 

In  this  relationship  between  the  United  States  and  NATO,  you 
are  a  country  well  ahead  of  some  European  nations  in  many 
technological  fields,  sometimes  far  more  than  we  conceive. 

We  need  to  avoid  the  risk  of  the  United  States  going  very 
strongly  in  some  direction  with  European  nations  struggling 
behind.  The  link  here  in  Norfolk,  Va.,  between  U.S.  Joint  Forces 
Command  and  ACT,  is  valuable  for  both  NATO  and  the  United 
States.  That  is  why  I  think  that  the  presence  of  a  NATO  command 
on  U.S.  soil  is  important.  It  says  that  NATO  is  more  than  Europe; 
it  is  also  the  United  States  and  Canada,  and  we  are  all  together. 

It  is  important  to  be  aware  of  this  because  in  today's  security 
environment  challenges  are  more  globalized,  coming  from  ev¬ 
erywhere  and  affecting  all  our  citizens  wherever  they  are.  CHIPS 

For  more  information  about  NATO  Allied  Command  Transformation,  go  to  www. 
act.nato.int/. 
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Department  of  the  Navy  Launches 
Strategic  Sourcing  for  IT  Equipment 

Millions  Targeted  for  Savings  on  Client  and  Enterprise  Computing 


By  Floyd  Groce  and  Roger  Yee 

In  this  ever-tightening  budget 
environment,  the  Department  of 
the  Navy  (DON)  has  undertaken  a 
strategic  sourcing  pilot  initiative  to 
achieve  cost  savings  and  acquisi¬ 
tion  process  improvements. 

In  2008,  the  Assistant  Secretary 
of  the  Navy  for  Research,  Develop¬ 
ment  and  Acquisition  (ASN  RDA) 
and  the  DON  Chief  Information 
Officer  jointly  chartered  the  DON 
IT  Equipment  Commodity  Team  to 
achieve  the  following  goals: 


/  Reduce  total  life-cycle  costs; 

/  Reduce  time  from  requirement  identification  to  delivery; 

/  Maximize  usage  of  small  business  capabilities; 

/  Improve  the  ability  to  manage  IT  assets; 

/  Increase  strategic  vendor  and  IT  management; 

/  Structure  compliance  into  the  acquisition  process;  and 
/  Create  a  technical  foundation  forfuture  Naval  net-centric  operations. 


As  a  result  of  an  initial  opportunity 
assessment,  non-NMCI  IT  equipment 
was  identified  as  the  most  immediate 
opportunity  to  address.  This  included 
desktops,  laptops,  servers,  and  associ¬ 
ated  software  and  peripherals. 

Through  spend  analyses  performed 
in  Phase  1  (Profile  Commodity),  it  was 
revealed  that  the  DON  spends  more 
than  $500  million  on  non-NMCI  equip¬ 
ment  annually.  The  team  learned 
there  were  thousands  of  contracts  and 
a  lack  of  consistent  buying  guidelines 
resulting  in  a  variety  of  equipment 
configurations,  imposing  avoidable 
support  and  maintenance  costs. 

With  no  DON-wide  established  contracts,  along  with  the  dis¬ 
advantages  associated  with  decentralized  and  disaggregated 
buying  and  funding,  the  DON'S  potential  negotiating  leverage 
has  been  greatly  reduced. 


Roger  Yee,  the  Navy's  lead  for  strategic  sourcing  efforts  from 
ASN  RDA,  summarized  the  intended  benefits:  "Through  the 
DON  strategic  sourcing  initiative,  we  will  not  only  reduce  costs 
for  the  department's  non-Navy  Marine  Corps  Intranet  (NMCI)  IT 
equipment,  but  will  improve  our  operational  efficiency  and  sup¬ 
ply  management." 

Disciplined  Process 

To  achieve  these  goals,  the  team  adopted  a  disciplined  and 
repeatable  process  (shown  in  Figure  1)  to  guide  their  efforts  and 
align  stakeholders'  expectations. 

"This  strategic  sourcing  process  has  been  proven  in  numer¬ 
ous  projects  in  the  government  and  commercial  sectors  yield¬ 
ing  significant  savings  in  the  acquisition  and  management  of 
goods  and  services,"  said  Lido  Ramadan  from  Censeo  Consult¬ 
ing  Group,  a  leader  in  the  execution  of  strategic  sourcing  in  the 
federal  government.  "This  approach  can  be  applied  to  many 
goods  or  services  procured  throughout  the  DON." 


The  Solution 

Upon  completion  of  Phase  3  (Develop  Commodity  Strategy) 
of  the  strategic  sourcing  process,  the  team  developed  three 
vital  and  integrated  strategy  recommendations  to  improve  the 
acquisition  of  non-NMCI  IT  equipment.  Figure  2  illustrates  the 
three  phases  of  the  solution  set. 

Standards  -  At  the  foundation  of  the  strategy  is  the  establish¬ 
ment  of  DON-wide  hardware  configuration  and  buying  stan¬ 
dards.  As  part  of  the  stand-up  of  a  Center  of  Excellence,  repre¬ 
sentatives  from  various  DON  networks  are  analyzing  existing 
configurations  and  developing  DON-wide  hardware  standards. 
Standard  configurations  will  help  create  a  technical  platform  for 
net-centric  warfare,  enable  better  security  and  information  ex¬ 
change,  and  reduce  total  maintenance  time  and  cost. 

Contracts  -  To  enable  centralized,  consolidated  purchasing,  the 
DON  CIO  and  ASN  RDA  joint  policy  will  designate  use  across  the 
Department  of  the  Navy  for  the  Army's  Computer  Hardware  En- 
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Figure  2.  The  solution  shown  in  three  phases. 


terprise  Software  Solution  (CHESS)  and  the  Air  Force's  IT  Com¬ 
modity  Council  (ITCC)  contracts. 

A  Memorandum  of  Understanding  is  envisioned  to  formal¬ 
ize  the  relationship  and  ensure  the  availability  of  DON-specific 
equipment.  For  technical  requirements  that  cannot  be  met 
through  these  vehicles,  the  team  will  establish  new  "supple¬ 
mentary"  contract(s),  which  will  be  open  for  use  across  the  en¬ 
tire  DoD. 

Process  -  To  effectively  manage  the  DON-approved  buying  ve¬ 
hicles,  an  organization  will  be  designated  to  manage  DON  use  of 
the  Army  CHESS  and  Air  Force  ITCC  contracts  and  relationships 
with  these  program  offices.  To  consolidate  future  purchases,  a 
DON-specific  process  is  being  developed  to  aggregate  DON  IT 
equipment  requirements  and  funding.  Strategic  sourcing  ini¬ 
tiatives  often  find  significant  savings  from  improving  how  pur¬ 
chases  are  managed,  not  only  by  reducing  the  negotiated  price 
of  a  commodity. 

Communications 

As  with  any  department-wide  initiative,  communications  will 
be  essential  for  adoption  throughout  the  DON.  A  formal  com¬ 
munications  plan  will  identify  DON  stakeholders  and  the  best 
methods  of  communications  and  delivery.  The  team  will  lever¬ 
age  the  Enterprise  Software  Initiative's  (ESI)  communications 
avenues  and  coordinate  future  communication  efforts  through 
their  established  channels.  DON  CIO's  application  of  Lean  Six 
Sigma  to  ESI  will  also  be  leveraged  to  benefit  from  DON  and 
DoD-wide  enterprise  license  agreements. 

"The  DON  CIO's  Enterprise  Software  Licensing  Lean  Six  Sigma 
Project  Team  has  similar  findings  as  the  DON  IT  Equipment 
Commodity  Team,"  said  Floyd  Groce,  DON  CIO  team  lead  for 
Enterprise  IM/IT  Planning  and  co-chair  of  the  DoD  Enterprise 
Software  Initiative  Working  Group.  "Both  of  these  projects  will 
benefit  as  we  establish  our  common  DON  enterprise  processes." 

Return  on  Investment 

Considerable  savings  are  expected  from  the  efforts  of  the 
DON  IT  Equipment  Commodity  Team.  This  cost  avoidance  is 
largely  driven  by  the  use  of  appropriate  acquisition  vehicles, 
consolidated  purchasing  leverage  and  improved  configuration 
management.  CHIPS 


DON  Enterprise  Data  at  Rest 
Solution  for  all  non-NMCI 
Assets  is  Awarded 

The  Department  of  the  Navy  enterprise  solution  for  protec¬ 
tion  of  sensitive  Data  at  Rest  (DAR)  on  non-Navy  Marine  Corps 
Intranet  (NMCI)  assets  is  now  available.  Implementation  of 
this  solution  enables  compliance  with  Defense  Department 
and  DON  requirements  associated  with  protection  of  person¬ 
ally  identifiable  information  (Pll)  and  other  types  of  sensitive 
DAR  on  mobile  computing  devices  and  portable  storage 
media. 

Navy  and  Marine  Corps  organizations  that  need  this 
software  should  coordinate  their  requirements  through  the 
chain  of  command  to  the  Deputy  Chief  of  Naval  Operations 
for  Communication  Networks  (N6 )  and  Headquarters  Marine 
Corps  (C4)  points  of  contact  identified  in  DON  CIO  message 
DTG  312021Z  JAN  2009. 

On  Jan.  23,  2009,  the  DON  awarded  MTM  Technologies  a 
blanket  purchase  agreement  for  purchase  of  the  DON  Mobile 
Armor  software  bundle.  Implementation  of  this  solution 
enables  compliance  with  DoD  and  DON  DAR  protection 
requirements  outlined  in  Joint  Task  Force-Global  Network 
Operations  Communication  Tasking  Order  08-009  and  DON 
CIO  message  DTG  091256Z  OCT  07. 

All  purchases  of  the  DON  enterprise  DAR  solution  must  be 
executed  through  the  enterprise  agreement,  which  can  be 
found  on  the  DON  IT  Umbrella  Program's  Web  site  at  www. 
it-umbrella.  navy.mil. 

Procurement  of  other  DAR  protection  solutions  is  prohib¬ 
ited.  Organizations  that  previously  acquired  or  implemented 
other  DAR  encryption  solutions  shall  migrate  to  the  DON 
enterprise  solution  prior  to  license  renewal. 

NMCI  successfully  piloted  its  GuardianEdge  DAR  protection 
solution  in  fall  2008  and  will  be  deploying  it  to  all  NMCI  work¬ 
stations  between  March  and  September  2009.  CHIPS 


For  further  information,  training  and  deployment  sched¬ 
ules,  NMCI  users  may  visit  https://www.homeport.navy.mil/ 
management/data-at-rest. 
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Vice  Adm.  H.  Denby  Starling  II 

Commander,  Naval  Network  Warfare  Command 


Vice  Admiral  H.  Denby  Starling  II  assumed  command  of  Naval  Network  Warfare  Command  June  15, 

2007.  He  is  responsible  for  operating,  maintaining  and  defending  Navy  networks,  and  conducting  infor¬ 
mation  operations,  space  and  fleet  intelligence  operations. 

Overseeing  a  global  force  of  more  than  14,000,  he  is  also  the  functional  Component  Commander  to  U.S. 

Strategic  Command  for  space,  information  operations  and  network  operations. 

CHIPS  spoke  with  Vice  Adm.  Starling,  with  other  members  of  the  media,  after  he  participated  in  a  panel 
discussion  about  cyber  security  challenges  at  a  major  defense  conference  in  San  Diego  in  February. 

- — - — - - -  Vice  Adm.  H.  Denby  Starling  II 


Q:  In  the  panel ,  you  spoke  about  the  need  for  network  visibility.  I  thought 
the  Cyber  Asset  Reduction  and  Security  and  Consolidated  Afloat  Net¬ 
works  and  Enterprise  Services  projects  were  addressing  the  other  net¬ 
works  that  are  not  part  of  the  Navy  Marine  Corps  Intranet.  What  is  not 
visible  in  the  Navy  network  enterprise? 

Vice  Adm.  Starling:  We  eventually  would  like  to  see  as  many  of  the 
Navy's  ships  and  other  networks  as  possible  riding  on  a  single  en¬ 
terprise  network.  I  suspect  that  we  will  always  have  a  requirement 
for  some  number  of  networks  that  are  not  part  of  our  enterprise 
system  but  are  protected  behind  a  firewall,  for  example,  research 
and  development  networks.  Today,  the  educational  networks  exist 
as  'excepted'  networks  because  they  have  requirements  that  are,  in 
many  cases,  fundamentally  non-military  functions. 

Our  supply  corps  will  always  need  to  interface  with  the  banking 
system  so  their  automated  teller  machines  will  work.  Our  hospital 
networks  will  always  need  to  electronically  interface  with  other 
health  systems  so  that  healthcare  for  those  in  the  Navy  is  seamless. 

We  contracted  with  EDS  to  provide  us  network  services  for  NMCI. 
But  as  the  commander  at  NETWARCOM,  I  do  not  have  the  ability  in 
real  time  to  look  into  the  NMCI  network  to  evaluate  its  health  and 
whether  or  not  somebody  is  attacking  the  network.  As  we  move 
into  the  Next  Generation  Enterprise  Network,  NGEN  will  move  us 
from  a  completely  outsourced  network  to  one  that  the  Navy  has  the 
ability  to  exercise  a  greater  level  of  command  and  control  over  and 
more  visibility  into. 

The  percentage  of  the  Navy's  networks  that  are  in  NMCI  today  is 
somewhere  near  55  percent.  There  are  large  portions  of  the  Navy's 
networks  that  are  still  outside  of  NMCI,  all  of  our  at-sea  networks,  for 
example.  The  Bureau  of  Medicine  and  Surgery  is  outside  of  NMCI. 

CARS  has  done  tremendous  work  in  reducing  the  number  of  leg¬ 
acy  networks  that  are  out  there.  The  number  has  gone  from  1,200, 
and  we  are  now  in  the  mid-400s  range  and  hope  to  get  down  to 
200.  As  you  mature  that  enterprise  network  and  turn  it  into  a  gov¬ 
ernment-controlled  network,  we'll  want  to  have  the  tools  in  place 
that  will  give  the  commander  the  ability  to  physically  look  into  the 
network. 

Q:  You  mentioned  Navy  excepted  networks ,  aren't  they  operating  under 
the  same  Navy  security  standards? 

Vice  Adm.  Starling:  They  do,  for  example,  if  Company  X  provides  the 
media  for  a  software  tool  and  they  patch  it,  and  they  shove  out  a 
patch  to  us  across  the  Navy,  we  would  hand  it  to  NMCI  and  tell  NMCI 


to  push  it  across  all  the  networks  and  tell  us  when  they  are  done. 

Then  we  would  pass  the  patch  to  all  the  other  guys  that  own  net¬ 
works,  and  tell  them  to  put  it  on  their  network,  and  tell  us  when 
they  are  done.  They  would  all  report  to  us  when  they  were  done 
and  I  would  think  life  is  good,  but  I  don't  have  a  way  to  go  in  and  see 
if  it  is  really  done,  I  have  to  depend  on  what  they  told  me. 

We  have  [network  defense  and  information  assurance]  systems 
in  the  Navy  called  the  Online  Compliance  Reporting  System  (OCRS) 
and  the  Joint  Task  Force-Global  Network  Operations  [to  protect 
the  Global  Information  Grid],  all  the  services  use  these.  I  then  have 
to  go  after  all  the  other  Navy  networks  and  all  the  other  Echelon 
II  chief  information  officers  and  say,  do  this,  and  tell  me  when  you 
have  done  it. 

With  NMCI,  I  only  have  to  tell  one  'person/  so  I  can  immediately 
get  the  patch  out  to  55  percent  of  the  Navy's  networks.  On  all  the 
others,  I  have  to  wait  for  them  to  do  it,  and  tell  me  they  did  it.  [But] 
I  don't  have  any  way  to  verify  that. 

We  are  deploying  Host  Based  Security  System  (HBSS)  across  the 
Navy.  One  of  the  things  the  HBSS  will  be  able  to  do  for  us  is  to  base¬ 
line  the  condition  of  all  the  computers  in  the  Navy.  As  we  get  this 
capability  fully  deployed,  it  will  give  us  the  ability  to  automate  and 
roll  this  information  up.  Then  I  don't  have  to  depend  on  somebody 
telling  me  that  they  did  it,  [instead]  all  the  machines  on  one  layer 
of  the  network  tell  the  next  layer,  tell  the  next  layer,  tell  the  next 
layer...  It  all  happens  automatically. 

The  bad  guys  can  move  quickly.  We  don't  want  to  have  to  figure 
out  during  the  log  review,  or  some  other  administrative  action,  that 
something  went  wrong.  We  would  like  to  have  better  systems  to 
tell  us  in  real  time. 

Q:  Can  Navy  networks  use  cloud  computing? 

Vice  Adm.  Starling:  This  is  a  whole  new  area  for  us.  From  a  techni¬ 
cal  point  of  view,  I  am  not  sure  I  could  give  you  a  well-informed 
answer  right  now,  but  we  do  have  our  technical  staff  looking  into 
it.  If  you  talk  to  commercial  vendors,  they  have  many  of  the  same 
challenges,  like  Verizon  and  AT&T.  They  operate  big  networks,  and 
they  have  real  security  concerns.  Those  guys  only  have  to  defend 
the  perimeter  of  where  you  enter  their  network. 

If  I  am  a  customer  of  Cox  Communications  at  home,  and  I  do  a 
crummy  job  of  keeping  my  computer  patched,  I  am  probably  only 
going  to  hurt  myself.  Cox  will  keep  me  from  doing  something  stu¬ 
pid  that  will  infect  their  whole  network.  In  the  Navy,  I  have  to  care 
about  everybody's  computer.  If  we  have  a  problem,  it  goes  all  the 
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"What  we  need  to  understand  when  we  see  events  like  those  in  Estonia 
and  Georgia  is  that  this  is  a  precursor  to  the  next  kinetic  fight  —  or 
perhaps  in  place  of  it.  In  fact,  CNO  has  stated  that  the  next  battle  will  be  in 
cyberspace  and  it  has  already  begun.  Our  President  recognizes  this  and  is 
taking  steps  to  strengthen  our  national  cyber  infrastructure." 

-  Vice  Adm.  H.  Denby  Starling  II 


NETWARCOM  Commander  Vice  Adm.  H.  Denby  Starling  II  speaking  at  a  panel  discussion  about  the 
challenges  of  cyber  security  at  West  2009,  cosponsored  by  AFCEA  International  and  the  U.S.  Naval 
Institute  in  February  in  San  Diego.  Photo  courtesy  of  AFCEA  International. 


the  way  out  to  the  tactical  edge;  that  makes  our  world  unique. 

Even  if  today  I  restructured  the  whole  Navy  [to  take  advantage  of 
new  technology],  I  would  have  to  keep  the  network  operating  and 
find  the  resources  to  do  that.  I  would  have  to  explain  to  my  leader¬ 
ship  why  that  was  important,  and  what  the  return  on  that  invest¬ 
ment  would  be.  It  couldn't  be  just  a  performance  improvement. 
It  has  to  be  a  security  improvement.  It  also  has  to  be  a  business 
process  improvement. 

Q:  With  NGEN  how  will  you  balance  accessibility  with  security? 

Vice  Adm.  Starling:  I  am  security  conscious.  My  job  is  to  guard  the 
gate.  Given  options,  I  will  normally  tend  toward  the  option  that  is 
more  secure.  There  are  a  lot  of  young  people  in  the  Navy  who  grew 
up  carrying  multiple  electronic  devices.  Young  Sailors  coming  into 
the  military  today  want  access.  We  have  to  balance  that  with  our 
requirements  for  information  and  network  security. 

When  we  first  formed  our  unclassified  networks  in  DoD,  these  la¬ 
bor-saving  devices  became  great  tools  with  tremendous  amounts 
of  capability.  Today,  we  could  not  live  without  our  unclassified  net¬ 
works.  But  the  unclassified  networks  are  connected  directly  to  the 
Internet  with  all  the  inherent  risk. 

We  have  to  continue  to  develop  the  technology  that  will  allow 
us  to  operate  in  cyberspace  where  everybody  else  is  and  do  so  in 
an  intelligent  fashion  so  that  we  can  provide  an  acceptable  level  of 
security  for  the  government's  unclassified  networks. 

We  have  workforce  training  challenges  that  any  big  company 
has.  How  do  I  train  the  Sailor  that  just  came  into  the  service  and 
is  used  to  clicking  whatever  he  wants  to  on  his  home  computer 
or  connecting  to  a  P2P  (peer-to-peer)  server  that  there  are  some 
things  you  can't  do  any  more? 

We  do  well  with  that  but  considering  that  we  have  about  700,000 
users,  if  even  a  small  percentage  of  those  don't  want  to  follow  the 
rules  you  have  an  opportunity  for  significant  vulnerability.  We  have 
to  continually  address  that  problem. 

We  want  to  be  good;  we  want  to  be  leading  edge.  Perfect  can 
be  the  enemy  of  good  enough.  We  have  to  ask  ourselves  what  are 
those  essential  military  functions  we  want  to  be  able  to  do.  Then 
we  need  to  buy  the  technology  that  will  enable  us  to  do  them  and 
make  sure  that  those  are  assured  and  completely  reliable. 

The  other  part  of  it  is  that  the  attack  methods  change  all  the 
time.  We  have  gone  from  hackers  that  wanted  to  take  control  of 
your  box  to  the  smart  guy  that  doesn't  want  you  to  know  he  was 


there.  We  have  gone  from  an  era  where  most  of  the  attacks  were 
phishing  to  where  we  see  more  compromised  Web  sites  and  chal¬ 
lenges  on  the  Web. 

Q:  Is  NETWARCOM  planning  mandatory  security  training  for  the  Navy? 

Vice  Adm.  Starling:  We  just  had  a  Navywide  security  focus  day  to 
raise  the  awareness  of  computer  network  security  for  everybody 
across  the  Navy.  The  Chief  of  Naval  Operations  directed  all  Navy 
activities  to  conduct  a  network  security  training  and  awareness 
day  no  later  than  Feb.  28.  He  mandated  the  training  in  response  to 
recent  security  incidents  on  Navy  computer  networks. 

All  Navy  commands  were  given  a  list  of  specific  training  areas 
and  topics,  from  safe  home  computing,  to  phishing,  to  policy  while 
they  are  operating  Navy  computers.  NETWARCOM's  network  secu¬ 
rity  training  was  Feb.  23  at  Naval  Amphibious  Base  Little  Creek's 
theater. 

This  was  not  just  a  one-time  initiative.  Increased  network  secu¬ 
rity  must  become  ingrained  in  our  daily  activity  on  the  Navy  net¬ 
work.  We  are  trying  to  tackle  a  cultural  issue. 

We  often  say  that  the  network  is  a  weapons  system.  In  reality,  not 
everybody  in  the  Navy  gets  to  operate  a  weapons  system  every 
single  day.  While  I  think  that  folks  who  operate  at  the  tactical  edge 
understand  this,  does  the  staff  officer  or  the  Sailor  who  works  in  a 
staff  position?  He  sees  his  computer  as  an  e-mail  machine  or  the 
machine  that  he  does  spreadsheet  work  on,  but  does  he  under¬ 
stand  that  every  time  he  sits  down  and  logs  on  to  that  computer, 
he  steps  into  the  exact  same  battlespace  that  the  bad  guys  of  the 
world  operate  in? 

I  look  at  computer  security  the  same  as  force  protection,  and 
there  is  a  certain  level  of  awareness  that  you  have  to  maintain  for 
force  protection  all  the  time.  After  9/11,  everyone's  awareness  was 
high.  The  further  away  you  get  from  a  big  event,  the  level  of  con¬ 
cern  tends  to  drop  off.  Once  in  a  while,  we  need  to  make  it  an  orga¬ 
nizational  focus  to  remind  people  why  this  is  important. 

That  is  what  we  wanted  to  do,  remind  everybody  in  the  Navy 
why  this  is  important.  All  you  have  to  do  is  open  the  paper  to  un¬ 
derstand  why.  It  is  important  to  make  folks  recognize  [that]  as 
members  of  DoD  our  folks  are  a  target,  and  they  have  responsibil¬ 
ity  to  operate  their  computer  in  a  responsible  fashion. 

Q:  It  was  reported  in  the  news  that  embedded  chips  in  card  readers 
that  were  manufactured  overseas  were  programmed  to  divert  money 
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from  bank  accounts.  How  does  outsourcing  IT  affect  our  national 
systems ? 

Vice  Adm.  Starling:  It  is  not  a  surprise  to  anyone  that  stuff  is 
being  preloaded  in  commercial  software.  It  is  something  we 
have  to  be  aware  of.  We  have  committed  ourselves  across  DoD 
to  commercial  off-the-shelf  solutions;  we  are  going  to  buy  our 
computers  from  commercial  vendors.  The  cost  to  do  otherwise 
would  be  prohibitive.  It  is  something  you  have  to  walk  into  with 
your  eyes  wide  open,  and  it  is  something  you  shouldn't  kid  your¬ 
self  about. 

Since  I  am  probably  not  going  to  disassemble  and  inspect 
every  machine  that  I  ever  get  and  probably  wouldn't  be  clever 
enough  to  find  everything  that  might  be  there  even  if  I  did,  it 
becomes  all  the  more  important  that  we  continue  to  develop 
the  tools  to  help  us  understand  the  network's  health.  Then  we 
can  detect  anomalous  activity  on  the  network  and  understand 
what  that  means  as  opposed  to  chasing  down  everything  that 
is  in  the  box. 

Q:  Do  these  concerns  that  we  discussed  make  conducting  electronic 
warfare  and  information  operations  difficult? 

Vice  Adm.  Starling:  The  ability  to  do  computer  network  opera¬ 
tions:  computer  network  attack,  exploit  and  defend,  is  depen¬ 
dent  on  the  ability  to  understand  your  own  network  to  a  very 
high  degree,  as  well  as  understanding  an  adversary's  network. 

While  I  provide  trained  folks  who  can  do  the  exploit  and  at¬ 
tack  mission,  it  is  not  a  function  that  inherently  resides  within 
my  organization.  We  have  national  level  organizations  that  have 
that  responsibility. 

We  certainly  want  to  have  as  much  knowledge  about  the  ad¬ 
versary's  network  as  I  am  going  to  have  about  my  own.  Some¬ 
body  made  a  good  comment  earlier  [in  the  panel]:  You  can't  de¬ 
fend  what  you  can't  see.  We  will  get  better  at  this.  It  is  recognized 
that  we  need  to  do  more,  but  it  is  a  question  of  what  resources 
you  have  available  to  apply  to  the  problem. 

Q:  We  read  about  the  cyber  attacks  in  Latvia/Estonia  and  Georgia. 
Are  we  in  better  shape  than  they  were? 

Vice  Adm.  Starling:  Estonia  was  an  interesting  example  a  few 
months  ago.  Estonia,  like  a  lot  of  countries  that  have  emerged 
from  dark  places,  was  very  highly  network  leveraged.  You  can 
deploy  networks  quickly  and  because  of  that  they  were  very 
vulnerable. 

We  are  certainly  dependent  on  our  networks,  but  I  would 
argue  that  our  networks  are  more  diverse  and  more  highly  dis¬ 
persed.  I  think  that  we  have  more  national  capability  than  Estonia 
did  to  understand  our  adversaries  and  take  appropriate  steps. 

What  we  need  to  understand  when  we  see  events  like  those  in 
Estonia  and  Georgia  is  that  this  is  a  precursor  to  the  next  kinetic 
fight  —  or  perhaps  in  place  of  it.  In  fact,  CNO  has  stated  that  the 
next  battle  will  be  in  cyberspace,  and  it  has  already  begun.  Our 
President  recognizes  this  and  is  taking  steps  to  strengthen  our 
national  cyber  infrastructure.  CHIPS 

For  more  information  about  NETWARCOM,  go  to  www.netwarcom.navy.mil. 


Reduce  Pll  Loss  by  Proper  Disposal/ 
Sanitization  of  Unclass  Equipment 

By  DON  CIO  Privacy  Team 

During  the  past  year,  the  Department  of  the  Navy  has 
experienced  problems  relating  to  turning  in  excess 
information  technology  and  office  equipment  that 
contain  personally  identifiable  information  (Pll). 

Disposed  equipment  most  commonly  found  to  contain  Pll 
includes:  office  desks,  safes,  file  cabinets,  copiers  and  comput¬ 
er  hard  drives.  Recent  audits  by  the  Department  of  Defense  In¬ 
spector  General  and  the  Naval  Audit  Service  confirm  that  DON 
turn-in  procedures  have  not  been  consistently  followed,  are 
inadequate  or  out-of-date. 

While  much  of  the  turn-in  process  involves  the  Defense 
Reutilization  Marketing  Offices  (DRMO),  Navy  Marine  Corps 
Intranet  (NMCI)  or  other  DON  network  owners,  the  local  com¬ 
mand  or  unit  is  responsible  for  information  security,  physical 
security  and  property  accountability  for  all  excess  unclassified 
equipment  awaiting  sanitization,  shipment  to  DRMO,  or  re¬ 
lease  to  another  DoD  component  or  donation  activity. 

The  following  is  a  list  of  lessons  learned  that  should  be  con¬ 
sidered  by  local  commands  or  units  when  preparing  equip¬ 
ment  for  disposal. 

□  Use  DRMS  Instruction  4160.14,  dated  May  12,  2008,  which 
provides  guidance  on  turn-in  of  excess  equipment  to  DRMO. 

□  Remove  all  drawers  in  desks  and  file  cabinets  to  ensure  stray 
documents  are  removed. 

□  Ensure  all  lockable  drawers  or  cabinets  are  open  for 
inspection. 

□  Refer  to  Assistant  Secretary  of  Defense  (ASD)  Memo  "Dispo¬ 
sition  of  Unclassified  DoD  Computer  Hard  Drives,"  dated  June 
4, 2001,  which  provides  specific  instructions  on  how  to  dispose 
of  hard  drives  in  the  DoD. 

□  Use  National  Security  Agency  approved  sanitization  equip¬ 
ment  to  properly  overwrite  and  degauss  excess  unclassified 
hard  drives. 

□  Ensure  copier  hard  drives  have  been  properly  overwritten 
and  degaussed. 

□  Develop  written  policies  and  procedures  to  clearly  define 
local  command/unit  roles  and  responsibilities. 

□  Provide  training  for  all  personnel  on  how  to  accurately  pre¬ 
pare  and  process  excess  unclassified  IT  equipment  before  for¬ 
warding  to  DRMO. 

□  Use  the  Web-based  Electronic  Turn-in  Document  (ETID)  sys¬ 
tem  for  all  equipment  bound  for  DRMO. 

□  Ensure  verification  labels  are  placed  on  all  hard  drives  that 
have  been  degaussed  and  overwritten. 

□  Keep  accurate  destruction  and  turn-in  records  for  a  mini¬ 
mum  of  five  years.  CHIPS 
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Experience 


Your 
Breaches? 


V|  j  S  Ltii'j  it  L:L*:3f 


The  following  is  a  recently  reported  compromise  of  personally  identifiable  information  (Pll)  involving  the  transmission  of 
an  un-encrypted  e-mail  which  contained  National  Security  Personnel  System  (NSPS)  performance  ratings  of  employees 
within  a  Navy  region.  Incidents  such  as  this  will  be  reported  in  each  subsequent  CHIPS  magazine  to  increase  Pll  awareness. 
Names  have  been  changed  or  removed,  but  details  are  factual  and  based  on  reports  sent  to  the  DON  CIO  Privacy  Office. 


Two  non-password-protected  attachments  to  an 
e-mail  were  sent  to  approximately  700  employees. 
The  attachments  were  created  for  each  NSPS  pay 
pool  and  provided  a  bar  chart  of  pay  pool  results 
presented  as  a  single  Microsoft  PowerPoint  slide. 

A  subordinate  field  activity  reported  that  some 
of  the  employees  had  access  to  the  underlying 
information  that  was  used  to  build  the  slides.  The 
initial  investigation  showed  that,  despite  com¬ 
mand  efforts  to  prevent  disclosure,  it  was  possible 
to  manipulate  the  attachments  and  reveal  privacy 
sensitive  data. 

Data  included:  name;  civilian  grade;  employee 
identification  number,  as  assigned  by  the  Defense 
Civilian  Personnel  Data  System  (DCPDS);  salary; 
and  fiscal  year  2008  rating  of  record  for  the  NSPS 
employees  at  the  affected  command. 

No  Social  Security  numbers  or  other  Pll  was 
compromised.  CHIPS 


Steve  Muck  is  the  DON  CIO  privacy  team  lead. 


Lessons  Learned 

JpfThis  incident  could  have  been  avoided  if  proper  warnings  from  the  NSPS 
Program  Office  about  downloading  NSPS  data  to  a  PowerPoint  presenta¬ 
tion  had  been  followed. 

□  While  performance  rating  information  does  not  meet  the  standard  defi¬ 
nition  of  Pll,  the  information  in  this  breach  is  privacy  sensitive  and  must 
be  treated  as  such. 

□  Strict  controls  must  be  in  place  so  that  only  those  personnel  with  a  need 
to  know  have  access  to  performance  rating  information. 

£3' The  NSPS  Program  Office  has  been  advised  of  the  compromise  of  infor¬ 
mation  and  will  work  on  a  fix  to  prevent  a  recurrence. 

□  All  electronic  or  paper  copy  documents  containing  Pll  must  be  marked 
with  the  following:  FOR  OFFICIAL  USE  ONLY  -  PRIVACY  SENSITIVE:  Any 
misuse  or  unauthorized  disclosure  of  this  information  may  result  in  both 
criminal  and  civil  penalties.  Refer  to:  Secretary  of  the  Navy  (SECNAV) 
Instruction  5211.5E. 

H Official  e-mails  containing  sensitive  information  must  be  digitally  signed. 
Refer  to  DON  CIO  message  DTG  032009Z  OCT  08. 

Q  E-mails  containing  25  or  more  Pll  records  must  be  encrypted  using  Win- 
Zip  or  another  authorized  DON  enterprise  solution.  Refer  to  DON  CIO 
message  DTG  171952Z  APR  07. 

□  Additional  privacy  information  can  be  found  on  the  DON  CIO's  Web  site: 
www.doncio.navy.mil. 


Marine  Corps 


JLD  YOUR  BREACHES! 
OP  THE  LOSS  OF  Pll! 


The  shredder 


The  DON  CIO  has 
posters  available  for 
download  to  display  in 
your  command.  Visit  our 
Web  site  at 
www.doncio.navy.mil 
and  search  on  "posters." 
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Rear  Adm.  John  M.  Richardson 


Interview  with  Rear  Admiral  John  M.  Richardson 
USJFCOM  Strategy  and  Policy  Directorate  (J5) 

Rear  Adm.  John  M.  Richardson  is  the  Director  of  Strategy  and  Policy  (J5)  for  U.S.  Joint  Forces 
Command. 

In  addition  to  numerous  sea  tours  aboard  the  attack  submarines  USS  Parche,  USS  Salt  Lake  City 
and  the  ballistic  missile  submarine  USS  George  C.  Marshall,  the  admiral  commanded  the  attack 
submarine  USS  Honolulu  and  Submarine  Development  Squadron  12,  where  the  six  submarines 
assigned  to  the  squadron  made  seven  extended  deployments  including  six  deployments  in  sup¬ 
port  of  Operation  Enduring  Freedom. 

Ashore,  he  has  served  on  the  staff  of  the  Chief  of  Naval  Operations,  Attack  Submarine  Division, 
as  Naval  Aide  to  the  President  of  the  United  States,  and  as  the  Prospective  Commanding  Officer  Instructor  for  the  Commander  of 
Submarine  Forces,  U.S.  Pacific  Fleet. 

A  1982  graduate  of  the  U.S.  Naval  Academy,  Richardson  also  holds  master's  degrees  from  MIT  and  the  National  War  College.  He 
reported  to  U.S.  Joint  Forces  Command  in  November  2007. 

In  December  2008,  U.S.  Joint  Forces  Command  released  a  strategy  document  that  forecasts  possible  threats  and  opportunities 
that  will  challenge  the  joint  force  in  the  future.  The  report,  the  2008  Joint  Operating  Environment,  has  been  in  the  forefront  of  dis¬ 
cussion  by  the  media  and  defense  strategists  since  its  release. 

JOE  2008  examines  trends  and  disruptions  in  the  geopolitical  and  military  landscape,  such  as:  demographics;  globalization;  eco¬ 
nomics;  energy;  food;  water;  climate  change  and  natural  disasters;  pandemics;  cyber;  and  space. 

These  trends  form  the  framework  for  exploring  the  following  types  of  scenarios:  competition  and  cooperation  among  conven¬ 
tional  powers;  potential  challenges  and  threats;  weak  and  failing  states;  the  threats  of  unconventional  power;  proliferation  of  weap¬ 
ons  of  mass  destruction;  technology;  the  battle  of  narratives;  and  urbanization. 

JOE  2008  is  meant  to  be  read  in  conjunction  with  the  Capstone  Concept  for  Joint  Operations  (CCJO),  which  was  signed  by  Chair¬ 
man  of  the  Joint  Chiefs  of  Staff  (CJCS)  Navy  Adm.  Mike  Mullen  Jan.  22,  and  developed  with  assistance  by  USJFCOM.  Representatives 
from  the  Army,  Navy,  Air  Force,  Marine  Corps  and  Coast  Guard,  as  well  as  U.S.  Special  Operations  Command  and  U.S.  Strategic  Com¬ 
mand,  also  assisted  in  the  JOE  and  CCJO  development. 

The  CCJO  describes  the  chairman's  vision  for  how  the  joint  forces  circa  2016-2028  will  operate  in  response  to  a  wide  variety  of 
security  challenges  which  are  discussed  in  JOE  2008. 

JOE  2008  contributes  to  USJFCOM's  central  mission  to  develop  a  vision  for  how  our  military  forces  will  conduct  future  operations 
and  tests  this  vision  in  the  most  realistic  and  challenging  ways  possible.  CHIPS  met  with  Richardson  in  January  to  discuss  the  JOE. 


CHIPS:  Can  you  explain  what  the  JOE  is? 

Rear  Adm.  Richardson:  The  nature  of  the  Joint  Operating  Envi¬ 
ronment  is  to  provide  an  operational  framework  to  outline  the 
challenges  and  opportunities  that  will  face  the  joint  force  in  the 
future.  Gen.  Jim  Mattis,  USJFCOM's  commander,  points  out  in 
the  Foreword  that  making  predictions  about  the  future  is  always 
risky. 

The  JOE  does  not  propose  to  be  any  better  than  past  predic¬ 
tions,  but  the  process  is  important  because  if  you  don't  do  it, 
you're  almost  guaranteed  to  be  caught  by  surprise  if  you  haven't 
thought  your  way  through  the  potential  challenges. 

The  Joint  Operating  Environment  document  itself  may  not  be 
as  important  as  the  process  of  getting  senior  leadership  in  na¬ 
tional  security  to  consider  and  discuss  the  possibilities  —  what 
are  the  potential  threats  and  opportunities,  and  then  what  are 
the  signposts  along  the  way  as  we  chart  our  course  into  the 
future? 


We  think  it  is  important  to  consider  not  only  those  things  that 
will  change,  but  also  those  things  that  are  going  to  be  endur¬ 
ing,  particularly  with  human  nature  which  has  been  an  enduring 
feature.  The  fundamental  nature  of  war  has  been  enduring  since 
Thucydides  or  Sun  Tzu  wrote  thousands  of  years  ago  about  the 
nature  of  conflict  and  human  behavior.  Many  of  those  things 
hold  true  today. 

The  nature  of  war  will  stay  the  same,  but  the  character  of  war 
will  change  quite  a  bit  as  technology  changes  and  as  the  enemy 
adapts.  As  the  strategic  environment  changes,  that  will  change 
the  character  of  war. 

We  look  at  those  trends  and  how  they  may  potentially  affect 
change  on  the  character  of  joint  force  operations,  how  those 
trends  may  combine  to  form  what  we  call  contexts.  The  contexts 
we  see  are  a  little  more  robust  and  complex  than  individual 
trends. 

Finally,  the  unique  contribution  to  the  Joint  Operating  Envi¬ 
ronment  is  that  it  focuses  on  the  joint  force,  and  the  final  step 
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in  the  logic  is  discussing  the  implications  of  these  trends  and 
contexts  on  joint  force  operations  of  the  future. 

CHIPS:  What  I  found  so  compelling  about  reading  the  JOE  is  that 
in  the  21st  century,  there  continues  to  be  profound  competition  for 
basic  human  needs  such  as  food  and  water.  The  State  Department 
and  U.S.  Agency  for  International  Development  could  do  much  to 
help  poor  countries.  Is  JFCOM  engaged  in  discussion  with  these 
agencies? 

Rear  Adm.  Richardson:  The  Joint  Operating  Environment  pro¬ 
poses  the  problem  statement.  The  natural  next  step  is  to  decide 
what  you  are  going  to  do  about  it  and  how  the  joint  force  is 
going  to  operate  in  response  to  the  environment  discussed  in 
the  JOE.  That  response  is  discussed  in  the  Capstone  Concept  for 
Joint  Operations. 

The  Joint  Operating  Environment  document  sets  the  prob¬ 
lem,  and  the  Capstone  Concept  for  Joint  Operations  talks  about 
how  the  joint  force  will  respond  to  meet  the  problems  and  op¬ 
portunities  that  the  JOE  talks  about. 

Many  of  the  problems  posed  in  the  Joint  Operating  Environ¬ 
ment  are  going  to  require  solutions  that  certainly  go  beyond  the 
military. 

Joint  Forces  Command  is  closely  involved  with  other  branch¬ 
es  of  our  government,  other  elements  of  national  power  —  the 
State  Department,  the  Treasury  Department,  and  the  Depart¬ 
ment  of  Agriculture  for  interagency  solutions  —  extending  even 
further  into  a  multinational  realm,  because  we  are  not  going  to 
fight  alone;  we  are  not  going  to  face  these  challenges  alone. 

[There  are]  lots  of  opportunities  and  Joint  Forces  Command  is 
looking  at  the  future  towards  ways  we  can  bring  these  partner¬ 
ships  together  and  craft  productive  solutions. 

It  may  be  that  in  a  number  of  these  areas,  for  instance,  in  en¬ 
gagement,  or  reconstruction  in  response  to  a  crisis,  where  the 
military  is  not  in  the  lead.  We  may  provide  support  to  another 
government  agency  or  multinational  coalition  that  is  much  bet¬ 
ter  suited  to  take  the  lead. 

CHIPS:  Who  is  the  audience  that  you  are  targeting  —  the  joint  force, 
Congress  ...Is  the  JOE  intended  to  convince  an  audience  about  the 
threats?  Would  the  average  citizen  benefit  from  reading  it? 

Rear  Adm.  Richardson:  Our  target  audience  are  the  leaders  and 
professionals  in  the  national  security  field.  Our  approach  is  if 
the  idea  is  compelling,  it  will  start  the  conversation  about  these 
ideas.  So  we  hope  to  provide  a  compelling  case  for  discussion 
for  some  of  these  potential  futures.  It  is  just  a  perspective. 

We  tried  to  make  it  readable;  it  is  unclassified,  and  it  has  got¬ 
ten  plenty  of  distribution  online.  It  is  on  our  Web  page  (www. 
jfcom.mil),  and  anybody  can  download  it. 

CHIPS:  The  JOE  discussed  how  the  power  of  a  few  individuals,  or  sin¬ 
gle  person,  can  cause  global  instability.  Do  you  put  a  lot  of  weight 
on  the  power  of  one  individual  to  do  that? 

Rear  Adm.  Richardson:  When  we  talk  about  the  role  of  the  indi¬ 
vidual,  we  come  at  it  in  two  different  ways.  We  can  talk  about 
trends  and  plot  those  from  point  to  point  and  draw  a  nice  curve, 
but  one  of  the  enduring  things  about  the  future  is  that  no  mat¬ 
ter  how  hard  or  how  diligently  we  prepare,  we  are  never  going 


"...  One  might  also  note  how  much  the  economic  and  technological  landscapes 
outside  of  the  military  have  changed.  Economically,  in  1983  globalization  was  in  its 
first  stages  and  largely  involved  trade  among  the  United  States,  Europe,  and  Japan. 
The  tigers  of  Southeast  Asia  were  emerging,  but  the  rest  of  the  world  seemed 
caught  in  inescapable  poverty.  Just  to  give  one  example:  In  1983,  the  daily  transfer 
of  capital  among  international  markets  was  approximately  $20  billion.  Today,  it  is 
$1.6  trillion. 

“On  the  technological  side,  the  Internet  existed  only  in  the  Department  of 
Defense;  its  economic  and  communications  possibilities  and  implications  were  not 
apparent.  Cellular  phones  did  not  exist.  Personal  computers  were  beginning  to  come 
into  widespread  use,  but  their  reliability  was  terrible.  Microsoft  was  just  emerging 
from  Bill  Gates’  garage,  while  Google  existed  only  in  the  wilder  writings  of  science 
fiction  writers.  In  other  words,  the  revolution  in  information  and  communications 
technologies,  taken  for  granted  today,  was  largely  unimaginable  in  1983. 

“A  revolution  had  begun,  but  its  implications  remained  uncertain  and  unclear. 
Other  advances  in  science  since  1983,  such  as  the  completion  of  the  human 
genome  project,  nano  technologies  and  robotics,  also  seemed  the  provenance  of 
writers  of  science  fiction.” 

-  Extracts  from  the  Joint  Operating  Environment  2008 


to  be  able  to  eliminate  surprise  from  our  future.  We  will  be 
surprised. 

We  have  to  design  a  force  built  to  sustain  surprise,  so  we  will 
have  the  fewest  regrets  when  that  surprise  comes  —  not  if  it 
comes.  In  terms  of  the  features  of  the  joint  force  for  the  future, 
that's  where  the  ideas  about  balance  and  resiliency  and  adapt¬ 
ability  enter  the  discussion. 

If  you  take  a  historical  look,  one  of  those  areas  where  you  can 
see  surprise  come  in,  where  history  is  fragile,  where  you  can  see 
these  disruptions,  is  in  the  role  of  very  powerful  individual  lead¬ 
ers.  You  can  pick  them  out  —  both  good  and  bad  —  through¬ 
out  history  and  see  that  one  single  individual  personally  made 
a  tremendous  difference.  Things  could  have  been  very  different 
with  a  different  person  in  charge  —  leaders  matter  a  great  deal. 

Winston  Churchill  would  be  a  great  example  of  a  leader  that 
made  an  essential  difference  in  the  outcome  of  World  War  II.  On 
the  other  hand,  if  Hitler  had  not  risen  to  power,  we  might  have 
seen  a  much  different  situation  in  Germany. 

If  we  talk  about  discontinuities  or  potential  surprises,  who 
rises  to  power,  how  much  power  they  have,  and  how  they  use 
that  power,  can  be  hard  to  predict. 

The  other  place  where  the  JOE  talks  about  individuals  is 
through  globalization  and  the  Internet;  those  forces  give  a  sin¬ 
gle  individual  tremendous  reach  now.  You  can  literally  be  sitting 
at  your  computer  and  reach  out  across  the  world.  An  individual 
can  have  significant  effects;  we  call  it  a  'super-empowered'  indi¬ 
vidual  or  'super-empowered'  guerilla. 

Another  way  to  look  at  this  is  that  the  cost  of  entry  is  very 
cheap  for  many  disruptive  and  high-end  types  of  systems.  It  is 
literally  the  cost  of  a  piece  of  hardware,  a  computer  and  an  Inter¬ 
net  account  to  launch  something  with  severe  effects. 

It  is  becoming  affordable  to  have  high-end  technology,  and  if 
you  extrapolate  that  into  the  weapons  business,  you  can  easily 
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“There  is  always  going  to  be  uncertainty  [in  war],  and  there  is  always  going  to  be  a  human  element  no  matter 
how  many  satellites  or  how  much  ISR  (intelligence,  surveillance,  reconnaissance)  we  have.  We  are  never  going  to 
be  able  to  know  everything.”  -  Rear  Adm.  John  M.  Richardson 


see  that  in  the  not  too  distant  future,  a  weapon  with  precision 
guidance  is  achievable  by  anybody  who  has  cash. 

It  used  to  be  that  only  a  nation-state  would  have  that  kind 
of  weapon  capability.  Now  some  drug  cartels  have  enough  re¬ 
sources  that  they  are  building  submarines  in  the  jungle.  Any 
cash-rich  entity  can  just  as  easily  turn  that  kind  of  cash  into  other 
emerging  weapons  systems,  say  precision-guided  munitions. 

CHIPS:  In  writing  the  JOE ,  did  you  have  any  current  leaders  in  mind? 

Rear  Adm.  Richardson:  This  is  a  historically  informed  approach.  If 
the  future  of  conflict  is  going  to  remain  a  human  endeavor,  the 
best  school  of  human  nature  is  our  past.  We  look  at  how  people 
faced  analogous  situations  in  the  past  and  used  those  as  models 
and  scenarios  and  vignettes  to  illustrate  how  they  might  face 
similar  situations  in  the  future. 

The  scope  of  the  document  is  projected  eight  to  25  years  out. 
We  try  not  to  comment  on  the  present-day  situation  except  as  it 
might  be  consistent  with  or  the  starting  point  of  a  trend. 

CHIPS:  There  is  a  cautionary  note  repeated  in  the  JOE  that  states 
that  despite  the  high-tech  advances  in  weapons  and  communi¬ 
cations  systems  war  remains  a  human  endeavor  with  the  same 
aspects  of  fog ,  friction,  mistaken  assumptions,  uncertainty  and 
unpredictability  since  human  history  began.  It  doesn't  appear  that 
advanced  technology  has  made  a  difference  at  all. 

Rear  Adm.  Richardson:  It  is  important  to  have  an  understanding 
of  the  enduring  nature  of  warfare.  You  can  talk  about  future  war, 
and  you  can  talk  about  technology-enabled  warfare.  The  char¬ 
acter  will  change.  Precision-guided  munitions  have  changed  the 
character  of  warfare. 

But  there  are  still  fog,  friction  and  uncertainty.  The  human  ele¬ 
ments  are  not  going  to  change  as  long  as  this  is  a  human  chal¬ 
lenge.  It  is  not  a  weakness;  it  is  the  nature  of  the  problem.  There 
is  always  going  to  be  uncertainty,  and  there  is  always  going 
to  be  a  human  element  no  matter  how  many  satellites  or  how 
much  ISR  (intelligence,  surveillance,  reconnaissance)  we  have. 
We  are  never  going  to  be  able  to  know  everything. 

That  is  why  we  think  it  is  important  to  have  an  appreciation  of 
what  is  enduring  and  what  will  change  as  technology  advances 
and  the  strategic  landscape  shifts.  It  [war]  is  human-centric  and 
leader-centric  —  enabled  by  technology. 

CHIPS:  Do  you  think  there  can  be  a  game-changing  technology  de¬ 
velopment  that  can  change  the  JOE's  presumptions 7 

Rear  Adm.  Richardson:  One  way  is  that  you  could  have  a  single 
disruptive  technology  that  nobody  saw  coming,  a  new  inven¬ 
tion  that  could  have  an  unanticipated  game-changing  effect. 

Looking  back  in  history,  we  have  also  seen  that  it  is  not  a  new 
technology  but  some  new  way  to  combine  tools  in  a  way  that 
we  didn't  foresee,  for  example,  the  radar  warning  system  in  Brit¬ 
ain  [during  World  War  II]. 

Even  though  the  Germans  had  better  technical  radars,  it 


was  the  operational  concept  of  Britain  commanders  combin¬ 
ing  those  radars  into  a  network  they  used  as  a  system  that  was 
defining. 

The  IED  (improvised  explosive  device)  is  an  example  of  a  sim¬ 
ple  technology  used  in  disruptive  and  asymmetric  ways. 

CHIPS:  The  JOE  discusses  the  effects  of  globalization  and  the  inter- 
connectiveness  of  the  world  economy.  It  says  that  countries  are 
very  much  interdependent  and  have  too  much  to  lose  in  lives  and 
national  treasure  to  engage  in  a  major  war.  Will  that  be  a  factor  in 
maintaining  global  stability? 

Rear  Adm.  Richardson:  That  has  always  been  a  factor  in  whether 
a  nation  chooses  to  go  to  war.  Is  the  risk  worth  the  gain?  Global¬ 
ization  has  tied  us  all  together  in  new  ways  and  accelerated  the 
problem.  Now  we  have  tremendous  amounts  of  information  and 
tremendous  amounts  of  capital  being  transmitted  around  the 
world  in  quantities  and  speeds  that  were  previously  unforeseen. 

The  processes  that  control  those  transactions  have  to  adapt 
to  a  much  higher  bandwidth  and  a  much  higher  response  time. 
Things  can  avalanche  a  lot  more  quickly. 

CHIPS:  The  JOE  discusses  the  possibility  of  nations  forming  anti- 
American  alliances?  Do  you  see  this  as  likely? 

Rear  Adm.  Richardson:  It  is  a  possibility.  You  can  almost  see  the 
beginnings  of  it  forming.  We  are  naive  if  we  go  into  the  future 
thinking  that  everybody  is  going  to  like  us.  As  our  enemies  con¬ 
nect  with  each  other  they  are  going  to  find  ways  to  foil  our  plans 
and  disrupt  what  we  are  trying  to  accomplish.  There  is  the  po¬ 
tential  for  them  to  link  together  and  form  some  kind  of  alliance. 

CHIPS:  The  JOE  talked  about  the  rise  in  the  militaries  of  Russia, 
China,  other  Asian  countries,  and  the  disarmament  of  some  Euro¬ 
pean  countries.  Can  you  talk  about  how  these  instabilities  and  ten¬ 
sions  create  situations  in  U.S.  military  operations? 

Rear  Adm.  Richardson:  It  comes  to  that  question  of  balance  that 
we  have  mentioned  a  couple  of  times.  That  is  the  ultimate  end- 
state.  One  of  the  enduring  natures  of  war  is  that  the  enemy  is 
going  to  focus  on  your  vulnerabilities.  He  is  studying  us  as  much 
as  we  are  studying  him.  They  are  going  to  try  to  find  out  where 
we  are  weak,  and  they  are  going  to  direct  their  attack  into  that 
weakness. 

Right  now,  I  would  say  that  we  are  superior  in  conventional, 
state-on-state  and  fleet-against-fleet  warfare.  Nobody  is  going 
to  take  us  on.  Up  in  the  blue  sky,  nobody  is  going  to  take  us  on 
there. 

Where  we  need  to  achieve  the  balance  is  to  maintain  that 
conventional  superiority  even  as  we  improve  so  that  we  are  just 
as  superior  in  irregular,  unconventional  types  of  conflict.  That  is 
where  the  importance  of  intelligence  is,  in  watching  what  that 
balance  is  in  the  conventional  force  area  so  that  we  don't  let  the 
enemy  steal  the  march  on  us  as  we  are  improving  our  capability 
in  irregular  and  unconventional  war. 
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“The  future  operating  environment  will  be  characterized  by  uncertainty,  complex¬ 
ity,  rapid  change,  and  persistent  conflict.  ...  The  United  States  will  necessarily  be  a 
leader  nation  to  which  much  of  the  rest  of  the  world  will  look  for  stability  and  security. 
It  will  continue  to  fall  to  the  United  States  and  its  partner  nations  to  protect  and  sustain 
the  peaceful  global  system  of  interdependent  networks  of  trade,  finance,  information, 
law  and  governance. 

“. .  .Of  the  conditions  that  are  changing,  perhaps  the  most  significant  is  what  one  ob¬ 
server  has  described  as  The  Rise  of  the  Rest’  —  the  increasing  ability  of  other  states 
to  challenge  the  United  States  for  influence,  if  not  globally,  then  certainly  regionally. 
The  economic  and  military  predominance  that  has  underwritten  U.S.  foreign  and  de¬ 
fense  policy  for  the  past  two  decades  can  no  longer  be  assumed.” 

-  Extracts  from  the  Capstone  Concept  for  Joint  Operations  2009 


Rear  Adm.  John  M.  Richardson  in  his  office  at  JFCOM  Jan.  20,  2009. 


CHIPS:  How  would  you  recommend  your  colleagues  view  the  JOE ? 

Rear  Adm.  Richardson:  It  is  a  starting  point  for  discussion.  If  you 
want  to  make  practical  use  of  the  ideas  in  the  study,  you  would 
take  the  context  of  the  potential  futures  and  use  them  in  your 
war  games,  in  scenarios  for  experimentation  and  for  future  con¬ 
cept  development ... 

CHIPS:  The  JOE  calls  for  reform  in  the  acquisition  process  and  per¬ 
sonnel  systems.  Do  you  have  any  recommendations? 

Rear  Adm.  Richardson:  That  is  in  a  specific  section  of  the  study 
called  'Leading  Questions/  We  have  focused  this  study  at  the 
operational  level  of  war.  It  is  not  the  strategic  level,  and  it  is  cer¬ 
tainly  not  a  policy  document.  Those  two  topics  are  policy  mat¬ 
ters,  but  they  have  operational  implications. 

If  we  think  about  the  types  of  capabilities  we  need  to  face 
the  challenges  and  opportunities  in  the  Joint  Operating  Envi¬ 
ronment,  just  from  an  acquisition  standpoint,  it  is  getting  ex¬ 
pensive  to  do  business.  Some  of  our  competitors  have  different 
economic  systems. 

We  use  the  example  of  space  programs.  Compare  the  cost  of 
our  space  program  to  the  space  program  in  China.  It  would  be 
interesting  to  see  how  different  those  are.  China  is  able  to  put 
together  a  capability  for  a  lot  less  cost. 

A  lot  of  people  would  be  in  agreement  that  our  system  needs 
to  be  more  responsive.  Our  enemy  is  adapting  very  quickly.  He 
does  not  have  the  defense  industrial  base,  the  bureaucracy,  and 
all  the  processes  we  have  to  field  a  new  capability.  We  need  to 
stay  up  with  his  adaptation,  and  beyond  that,  be  able  to  gener¬ 
ate  some  uncertainty  in  the  enemy  —  to  inflict  some  difficulty  in 
his  thought  processes  and  create  some  uncertainty  about  what 
he  thinks  about  our  future.  That  requires  a  more  responsive  ac¬ 
quisition  approach. 

CHIPS:  How?  It  takes  a  long  time  to  field  major  weapons  systems. 

Rear  Adm.  Richardson:  Being  able  to  field  capabilities  more 
quickly  and  being  able  to  prototype  more  capabilities  so  you 
can  keep  the  enemy  guessing  about  what  sort  of  things  you  are 
going  to  bring  to  the  fight.  What  sort  of  things  can  impose  costs 
on  him  so  that  he  has  to  think  about  spending  some  of  his  capi¬ 


tal  to  hedge  against  these  uncertainties.  Cost-imposing  strate¬ 
gies  would  be  a  great  goal  for  acquisition  reform. 

CHIPS:  What  about  the  changes  to  the  personnel  system? 

Rear  Adm.  Richardson:  [We  need  to]  think  about  the  sorts  of  skill 
sets  that  are  required  to  improve  our  capabilities  and  to  become 
superior  in  some  of  these  human  types  of  warfare.  We  need  to 
have  a  better  understanding  of  some  of  the  people  we  are  going 
to  be  working  with,  what  their  culture  is,  what  their  language  is, 
what  their  motivation  is,  and  what  their  history  is. 

We  need  to  think  about  how  our  personnel  system  is  geared 
to  train  and  incentivize  the  joint  force  for  the  future.  Do  we  need 
a  new  construct  for  how  we  build  the  joint  force? 

But  again,  these  are  leading  questions.  The  answers  will  come 
from  changes  to  policy,  but  they  will  have  implications  on  the 
way  we  operate  the  force. 

CHIPS:  The  military  is  required  to  do  so  much  more  than  in  the  past. 

Rear  Adm.  Richardson:  Some  of  the  skills  are  not  traditionally  the 
ones  that  we  have  developed.  How  do  we  educate  those  leaders 
for  this  new  type  of  fight?  The  senior  enlisted  are  going  to  be 
making  important  decisions  in  very  complex  scenarios.  How  do 
we  train  that  person  to  have  the  awareness  and  the  tool-set  to 
make  an  informed  decision  in  that  type  of  environment?  That  is 
beyond  the  scope  of  the  JOE,  but  we  want  to  pose  the  problem; 
the  details  about  potential  solutions  are  the  next  step. 

CHIPS:  Is  there  anything  more  that  you  would  like  to  add? 

Rear  Adm.  Richardson:  It's  important,  as  we  consider  the  entire 
document,  to  understand  the  context  in  which  we  produced  it. 
We  are  not  making  any  hard  predictions,  as  we  said,  these  are 
always  risky.  It  is  certainly  not  policy  —  we  went  outside  the 
bounds  of  policy  to  stretch  the  range  of  possibilities  for  people 
to  think  about.  It  is  these  possible  threats  and  opportunities, 
posed  in  the  Joint  Operating  Environment,  that  are  the  starting 
point  for  a  discussion  about  national  security. 

The  Capstone  Concept  for  Joint  Operations  then  describes 
how  the  joint  force  will  operate  in  the  future  to  meet  the  chal¬ 
lenges  described  in  the  JOE.  CHIPS 
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Web  2.0  in  the  Federal  Government 

Enteritis  the  age  of  collaboration 


By  Brian  Burns 

•  ■"  ■■■■■  i  1 1  "■ "  * 


here  are  a  few  frontiers  left 
to  explore:  space;  the  world's 
oceans;  Earth's  inner  space;  mi¬ 
croscopic  and  nano  inner  spaces;  and 
cyberspace. 

Exploration  in  these  areas  is  led  by 
many  federal  agencies  such  as  NASA, 
the  National  Oceanic  and  Atmo¬ 
spheric  Administration,  the  National 
Science  Foundation  and  the  depart¬ 
ments  of  Commerce,  Defense  and 
Homeland  Security. 

Each  of  these  frontiers  relies 
on  the  advanced  tools  of 
cyber  technology  to  facili¬ 
tate  exploration.  In  this  arti¬ 
cle,  we  will  explore  cyberspace 
and  discuss  the  changes  that 
brought  us  to  the  use  of  Web 
2.0  in  the  federal  government. 


Evolution 

Cyber  technology  cannot 
be  considered  in  isola¬ 
tion  of  business  needs 
and  missions.  It  has 
evolved  as  a  stra¬ 
tegic  invest¬ 


ment  to 
support 


busi 
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ness  needs  and  missions  and  has  been 
consistently  constrained  by  computing 
power;  bandwidth;  storage;  geography 
and  geospace;  and  security  and  privacy 
concerns. 

Advances  in  technology  have  had  a 
dramatic  effect  on  society  causing  shifts 
in  cultural  models,  social  structures,  eco¬ 
nomics  and  living  conditions.  Humankind 
has  evolved  from  feudalism  to  the  agrar¬ 
ian  age,  to  the  industrial  age,  to  the  infor¬ 
mation  age  —  and  now  —  to  the  present 
age  of  collaboration.  JvWSBI-V-\V  :  " 

Up  until  the  industrial  age,  we  relied 
on  animals  and  our  brains  and  brawn  to 
accomplish  tasks  and  make  decisions. 
Through  the  industrial  age  we  relied  on 
electro-mechanical  devices,  human  anal¬ 
ysis  and  human  cognition  to  make  deci¬ 
sions  and  execute  tasks. 

During  the  information  age,  we  relied 
on  computer  computation  and  analysis 
to  execute  tasks,  and  still  relied  on  human 
cognition  to  make  decisions.  During  this 
time,  we  moved  from  punch  cards  and 
"dumb"  terminals,  to  user  interfaces;  to 
ubiquitous  interfaces. 

We  are  n&wJ9  poised  for  ubiquitous 
computing.  Why?  Because  the  cost  of 
memory,  bandwidth  and  storage  has  rap¬ 
idly  decreased  as  the  capacity  of  comput¬ 
ing  power,  bandwidth  and  storage  has 
exponentially  increased.  Hence,  we  are 
now  at  a  point  when  access  to  cyber  re¬ 
sources  is  readily  available  to  most  of 
the  population. 

Grid  computing  and  artificial  in¬ 
telligence  (Al)  can  provide  collab¬ 
orative  computing,  machine-based 
analysis,  rule-based  decisions 
and  execute  tasks.  Humans  are 
able  to  tap  into  both  cyber  re¬ 
sources  and  remotely  located 
individuals  to  accomplish 
business  functions  and 
social  activities. 

Many  baby  boom¬ 
ers  pioneered 
cultural  change 
during  the  in¬ 
formation  age 
when  they  con¬ 
vinced  their  tradi¬ 
tionalist  managers 


New  Web  2.0  tools  present  a  great  opportunity  to  collaborate  freely  and  openly  outside  the  confines 


of  office  walls.  As  artificial  intelligence,  cloud  computing  and  3-D  imaging  evolve,  we  will  immerse 
ourselves  into  using  our  five  senses  to  communicate  virtually. 


to  embrace  desktop  computing  over 
paper  processes  to  improve  business  pro¬ 
cesses  and  productivity. 

Today,  Millennial  are  pioneering  cultur¬ 
al  change  to  convince  their  baby  boomer 
managers  to  use  collaborative  Web  2.0 
tools,  instead  of  e-mail,  time-dependent 
media  broadcasts  and  structured  work 
hours,  to  gain  process  and  quality-of-life 
improvements. 

The  progression  is  familiar  to  many  of 
you.  We  moved  from: 

VM  (virtual  machines)  on  mainframes 

to  VMware  (virtual  software)  on  servers; 

■ 

Systems  Network  Architecture  (SNA) 
proprietary  priority  services  to  Internet 
Protocol  (IP)  standards-based  priority 
services; 

3270  terminals  (display  devices  used  to 
communicate  with  mainframes)  to  diskless 
workstations  with  terminal  services  —  a 
thin  client  display  window  used  to  view 
data  stored  on  servers.  Advantages  of 
thin  client  diskless  workstations  over  fat 
client  local  disk  workstations  can  include 
lower  production  and  operational  costs, 
lower  power  consumption,  quieter  opera¬ 
tion  and  lowered  security  risks; 

■  ■  vsiSi  t  nwfifi czv's  ■■  ■ 

Generalized  Markup  Language  (GML) 
script  to  Extensible  Markup  Language 
(XML); 

Bulletin  boards  and  listservs  to  wikis; 

Automated  data  processing  (ADP),  to 
information  systems  (IS),  to  information 
resources  management  (IRM),  to  infor¬ 
mation  technology  (IT),  to  information 
management  (IM),  to  cloud  computing 
—  a  style  of  computing  in  which  real¬ 
time  scalable  resources  are  provided  "as 
a  service"  over  the  Internet  to  users  who 
need  not  have  knowledge  of,  expertise  in, 
or  control  over  the  technology  infrastruc¬ 
ture  ("in  the  cloud")  that  supports  them; 

Standalone  mainframes,  to  central¬ 
ized  "glass  house"  or  data  centers,  to 
networked  data  centers,  to  distributed 


computing,  to  grid  computing,  meshed 
networks  and  cloud  computing. 

Mainframe  time-shared  services  to  the 
computing  cloud  of  shared  hosts  and 
services. 

We  used  to  write  letters.  Then  we  talk¬ 
ed  on  phones.  Then  we  wrote  e-mails 
and  sent  faxes.  Next  we  used  cell  phones, 
video  conferencing,  instant  messaging 
and  simple  messaging. 

Now  we  use  social  networking  utilities 
and  telepresence,  which  is  a  collection  of 
interactive  technologies  that  allow  users 
to  interact  in  real-time  with  one  another 
from  a  distance. 

We  are  exploring  virtual  reality  and,  in 
the  future,  we  will  use  3-D  tele-immersion 
and  other  cyber  sense  technology  which 
will  allow  users  to  immerse  themselves  in 
another  real-time  virtual  place. 

At  the  end  of  the  day,  these  media  tools 
fulfill  the  basic  requirement  to  communi¬ 
cate  effectively  in  what  is  perceived  to  be 
an  efficient  and  cost-effective  manner. 

Changes  in  the  Federal  Government 

With  these  technological  advances, 
the  federal  government's  use  of  technol¬ 
ogy  to  deliver  services  to  citizens  and  the 
warfighter  is  evolving  as  new  technology 
tools  are  invented. 

At  the  same  time,  there  needs  to  be  a 
balance  between  security  and  privacy 
controls  and  transparent  access  of  gov¬ 
ernment  information  and  services  to 
citizens. 

New  Web  2.0  tools  present  a  great  op¬ 
portunity  to  collaborate  freely  and  open¬ 
ly  outside  the  confines  of  office  walls.  As 
artificial  intelligence,  cloud  computing 
and  3-D  imaging  evolve,  we  will  immerse 
ourselves  into  using  our  five  senses  to 
communicate  virtually. 

As  Al  grows  evermore  intelligent  —  will 
it  become  our  sixth  sense?  As  the  new 
cyber  frontier  opens,  we  will  need  to  ex¬ 
plore  it  with  our  eyes  wide  open;  our  ears 
tuned;  and  our  fingers,  voice  and  retinas 
ready  to  respond,  while  abiding  by  appli¬ 
cable  laws  and  policies. 

In  government  acquisition,  Web  2.0 
opens  the  door  for  more  rapid  and  col¬ 


laborative  responses  to  requests  for  infor¬ 
mation  (RFIs),  requests  for  quotes  (RFQs), 
and  requests  for  proposals  (RFPs). 

Federal  procurement  specifications  will 
change  from  the  government  specifying 
how  contractors  are  to  design  and  pro¬ 
vide  systems,  to  specifying  capability  and 
service  requirements. 

This  means  that  as  solutions  become 
global  and  part  of  the  cloud,  industry 
will  need  to  provide  open  source  and 
nongovernment-owned,  cost-effective 
solutions  that  separate  the  "want  to  have" 
requirements  from  the  "need  to  have" 
requirements. 

The  government  needs  to  encourage 
industry  to  take  a  proactive  business  in¬ 
telligence  and  process  improvement 
role  and  propose  alternative  ways  to  ap¬ 
proach  RFP  requirements,  if  the  govern¬ 
ment  does  not  specify  requirements  in 
terms  of  service. 

In  the  Department  of  the  Navy,  the  DON 
Chief  Information  Officer  has  encouraged 
the  use  of  Web  2.0  tools  consistent  with 
applicable  laws,  regulations  and  policies. 
(See  the  DON  Web  2.0  article  in  the  CHIPS. 
January-March  2009  issue  at  www.chips. 
navy.mil/archives/09_Jan/web_pages/ 
Web2_0.html.) 

Real-time,  secure  information  access 
by  the  Navy  and  Marine  Corps  is  of  high 
interest.  Some  expectations  are  that  Web 
2.0  tools  will  expand  the  dimensions  of 
data  to  allow  tagging  of  the  data,  not 
only  for  content,  but  for  the  security  level, 
privacy  level,  authoritative  duration,  and 
authoritative  source/location. 

As  we  evolve  from  the  information  age 
to  the  collaboration  age,  Web  2.0  tools 
will  emerge  as  mainstream  ways  to  con¬ 
duct  ongoing  business  and  warfighting. 

Change  is  upon  us,  and  the  future  is 
now.  CHIPS 


Brian  Burns  is  a  member  of  the  Senior  Executive 
Service.  Mr.  Burns  is  on  detail  to  the  DON  CIO  as 
deputy  CIO  for  emerging  technology  from  the  De¬ 
partment  of  Education. 


FS  Tonnerre 


Exceptional  performance,  exceptional  crew 


By  Sharon  Anderson 

It's  difficult  to  decide  which  is  more 
impressive —  the  French  command  and 
projection  (BPC)  ship  FS  Tonnerre  (L9014) 
—  or  its  crew. 

Let's  start  with  the  ship,  Tonnerre  is  a 
marvel  of  the  most  modern  marine  tech¬ 
nology  and  the  second  ship  in  its  class  to 
be  built.  The  Mistral  class  launches  the 
French  Navy's  first  all-electric  warships. 

Construction 

Tonnerre,  and  the  first  ship  in  its  class, 
Mistral,  are  the  first  military  ships  to  be  fit¬ 
ted  with  a  propulsion  system  using  elec¬ 
tric  PODs,  or  propulsion  orientable  drives, 
supplied  by  four  diesel  alternators.  Each 
POD  consists  of  a  steerable  electric  motor 
housed  in  a  nacelle  suspended  under 
the  hull.  The  system,  adopted  from  civil¬ 
ian  ship  design,  consists  of  two  PODs  at 
the  stern  together  with  an  azimuth  bow 
thruster. 

The  design  allows  better  maneuver¬ 
ability  at  low  speeds  than  a  fixed  propel¬ 
ler  and  rudder  system.  Mistral  and  Ton¬ 
nerre  can  make  a  180-degree  turn  in  their 
length  and  remain  stationary  in  a  fixed 
position.  This  capability  is  essential  be¬ 
cause  the  Mistral  class  is  a  multipurpose 
ship  design  that  can  conduct  amphibi¬ 
ous  operations;  evacuation  and  disaster 
relief  operations;  flagship  and  command 
and  control  of  a  multinational  force;  and 
transportation  for  troops  and  freight. 

Operating  under  these  conditions,  the 
ship  can  carry  out  embarkation  and  dis¬ 
embarkation  operations  on  beaches  and 
in  poorly  equipped  ports. 

The  demands  to  reduce  costs  and  con¬ 
struction  timelines  led  to  the  adoption  of 
a  number  of  innovative  solutions,  includ¬ 
ing  the  simultaneous  construction  of  the 
bow  and  stern  sections  of  the  Tonnerre 
on  two  different  sites,  with  final  assembly 
of  the  two  sections,  called  "jumboisation" 
taking  place  in  Brest. 

During  construction,  the  French  Army 
and  Navy  worked  closely  with  the  ship¬ 
builders,  naval  architects  and  other  spe¬ 
cialists  in  a  single  integrated  workplace 
to  promote  innovation  and  to  quickly  de¬ 
velop  joint  solutions  to  problems. 


Tonnerre's  Commanding  Officer  Capt. 
Edmond  de  Vigouroux  d'Arvieu  pointed 
out  the  ship's  unique  features  during  a 
tour  of  the  ship  pierside  at  Naval  Base 
Norfolk  Jan.  28.  Tonnerre  was  in  Norfolk 
to  participate  in  the  Bataan  Expedition¬ 
ary  Strike  Group  Composite  Training  Unit 
Exercise  (COMPTUEX)  off  the  East  Coast 
in  February.  He  was  joined  by  U.S.  Navy 
Capt.  Jack  L.  Sotherland,  commodore  of 
the  Bataan  ESG  and  commander  of  Am¬ 
phibious  Squadron  Two  (PHIBRON  2). 

COMPTUEX  is  noteworthy  because 
Tonnerre  and  the  French  antisubmarine 
frigate  La  Motte-Piquet  conducted  joint 
interoperability  training  with  U.S.  Navy 
and  Marine  units.  "Force  projection  is 
Tonnerre's  most  important  mission," 
d'Arvieu  said. 

The  multipurpose  amphibious  assault 
ship  USS  Bataan  (LHD  5)  and  embarked 
Marines  from  the  22nd  Marine  Expedi¬ 
tionary  Unit  departed  Norfolk  Feb.  3  to 
begin  COMPTUEX. 

The  French  captain  said  Tonnerre's 
crew  is  eager  to  train  with  their  American 
counterparts,  and  he  enumerated  various 
elements  of  the  ship  that  are  designed  to 
host  a  multinational  task  force  including 
a  high  performance  internal  and  exter¬ 
nal  communications  suite  which  can  ac¬ 
commodate  up  to  200  workstations  for  a 
joint/allied  headquarters  connected  to  a 
wide  range  of  radio  and  satellite  commu¬ 
nication  and  information  systems. 

Thunder 

Tonnerre  can  communicate  with  any¬ 
one  anywhere  in  the  world,  according  to 
d'Arvieu.  A  modular  plug  and  play  con¬ 
figuration  enables  multinational  forces  to 
connect  their  own  specific  equipment  to 
the  network  that  can  access  any  military 
or  civilian  network  whether  French,  NATO 
or  European,  while  offering  working  con¬ 
ditions  similar  to  those  of  an  inland  com¬ 
mand  post.  About  9,600  square-feet  of 
adjustable  and  prewired  partitions  can 
house  up  to  270  staff  officers. 

Capt.  d'Arvieu  explained  that  the  chief 
advantages  of  the  ship's  design  are  elec¬ 
trical  efficiency,  better  use  of  ship  space 


and  lower  maintenance  costs.  The  space 
gained  by  the  use  of  the  azimuth  thrust¬ 
ers  means  more  space  for  the  crew  and 
the  construction  of  cleverly  designed 
compartments  that  conceal  the  machin¬ 
ery  that  runs  the  ship. 

That's  the  first  thing  you  notice  about 
Tonnerre:  the  absence  of  visible  pipes, 
equipment,  wires  and  noise.  Despite  its 
name,  which  translates  to  "thunder"  in 
English,  it's  surprisingly  quiet  on  board 
when  compared  to  the  continuous  ca¬ 
cophony  of  machinery  operating  on  most 
military  ships. 

Another  reason  for  the  unexpected  si¬ 
lence  is  its  crew  size.  Although,  Tonnerre 
can  accommodate  up  to  450  comfort¬ 
ably,  its  electronic  systems  significantly 
reduced  the  size  of  the  crew  traditionally 
needed  to  man  a  ship  of  its  size  and  multi¬ 
mission  functionality.  The  ship's  company 
includes  about  200  officers  and  crew¬ 
members,  according  to  Lt.  j.g.  Etienne 
Gaillard,  Tonnerre's  public  affairs  officer. 

The  second  thing  you  notice  about  the 
ship  is  that  its  pristine,  spacious  passage¬ 
ways  and  compartments  make  the  Ton¬ 
nerre  seem  almost  empty.  But  the  crew, 
when  you  encounter  them  purpose¬ 
fully  rushing  about  on  duty,  are  smartly 
dressed  with  an  air  of  jauntiness  that 
conveys  the  French  Navy's  long  history 
which  began  in  the  17th  century.  The  first 
French  Tonnerre,  part  of  the  Eclair-class, 
served  from  1759  to  1768.  The  French 
Navy,  officially  the  Marine  nationale,  is 
often  affectionately  called  La  Royale  by 
French  citizens. 

Multipurpose  Design 

Tonnerre's  designers  adopted  tech¬ 
nology  used  by  cruise  ships,  according 
to  Gaillard.  On  a  tour  of  the  bridge,  he 
explained  a  digital  surveillance  system 
which  monitors  the  ship's  spaces  for  fire, 
damage  and  excessive  heat.  After  he  ex¬ 
plained  the  ship's  fire  control  system, 
Gaillard  demonstrated  the  usefulness  of 
the  surveillance  system  by  remotely  clos¬ 
ing  a  door  on  another  deck.  "As  you  know, 
fire  is  our  worst  enemy  at  sea,"  he  said. 

Tonnerre  is  fitted  with  the  latest  version 
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of  the  combat  system  used  in  the  French 
Navy  called  SENIT  9.  The  system  has  an 
open  architecture  based  on  a  dual-re¬ 
dundant  tactical  network  interfacing  with 
all  weapons  and  sensors,  plus  navigation 
and  communications  equipment,  using 
protocols  including  ATM. 

A  high  level  of  functional  integration 
is  achieved  in  the  Combat  Information 
Center  (CIC),  and  bridge  operators  have 
access  to  combat  system,  navigation, 
communication  and  platform  manage¬ 
ment  functions.  The  system  also  supports 
other  tasks,  including  mission  planning 
and  management,  debriefing  and  on 
board  simulation.  The  layered  software 
allows  all  application  modules  to  be  inde¬ 
pendent  of  combat  management  system 
hardware  and  configuration. 

Multi-role  radar  keeps  track  of  the  situ¬ 
ation  around  the  ship  (air  and  surface 
units),  and  the  auto-defense  system  in¬ 
cludes  two  double  short-range  Simbad 
launchers  for  Mistral  missiles,  an  infrared 
homing  surface-to-air  missile. 

A  new  mapping  system  called  SENIN 
is  a  significant  innovation  that  enhances 
water  safety  and  facilitates  navigation. 
But,  Gaillard  said  that  the  crew  also  main¬ 
tains  traditional  navigational  skills  refer¬ 
ring  to  a  stack  of  nautical  charts  within 
easy  reach  of  crewmembers  monitoring 
electronic  consoles  on  the  bridge. 

Life  Onboard 

Located  in  the  forward  section  of  the 
ship,  crew  cabins  aboard  Tonnerre  are 
comparable  in  comfort  levels  to  pas¬ 
senger  cabins  aboard  Chantiers  de 
I'Atlantique-constructed  cruise  ships, 
Gaillard  said.  Indeed,  conveniently  fitted 
with  an  attractive  wood  desk  and  storage 
unit  and  stylish  carpeting,  the  cabins  are 
brightly  lit  and  sleek  in  design. 

Officers  have  individual  cabins  and  hy¬ 
gienic  facilities.  Senior  noncommissioned 
officers  share  two-man  cabins,  while  ju¬ 
nior  crew  and  embarked  troops  use  four- 
or  six-person  cabins  fitted  with  sanitary 
equipment,  which  allows  the  ship  to  ac¬ 
commodate  a  mixed  crew. 

Passageways  are  peppered  with  vin¬ 
tage  movie  posters  that  recall  movies  that 
feature  "Tonnerre"  or  "Thunder"  as  part  of 
the  title,  including  an  old  Western  from 
1960  starring  Alan  Ladd.  In  other  crew 
spaces,  pretty  landscape  paintings  add 
a  splash  of  color  to  the  otherwise  gray 
bulkheads. 


FS  Tonnerre's  Commanding  Officer  Capt.  Edmond  de  Vigouroux  d'Arvieu  dis¬ 
cusses  Tonnerre's  versatile  capabilities  during  a  tour  of  the  ship  pierside  at  Naval 
Base  Norfolk  Jan.  28. 


Fact  File 

The  keel  for  Tonnerre  (L  9014)  was  laid  down  in  August  2003  and  launched  in  July 
2005.  Tonnerre  was  commissioned  in  August  2007.  Tonnerre,  a  force  projection  and 
command  ship,  is  comparable  to  the  U.S.  Navy’s  dock  landing  ships  which  support 
amphibious  operations. 

Characteristics 

Length:  200  meters  or  656  feet 

Beam:  32  meters  or  104  feet 

Maximum  speed:  20  knots 

Displacement:  21,500  tons  -  fully  loaded 

Draught:  6.50  meters  or  21  feet 

Range  at  15  knots  >  11,000  nautical  miles 

Flight  deck  area:  lacre 

No.  of  helicopter  landing  pads:  6 

Propulsion:  Electric  by  means  of  PODs 

Crew:  About  200  including  officers 

Deployment  Capacity:  Troops:  450  to  700 

Vehicles:  60  armored  vehicles  or  a  squadron  of  13  Leclerc  class  tanks 

Helicopters:  12  NH90  or  16  Tigres 
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The  captain  said  the  ship  can  easily  ac¬ 
commodate  450  army  soldiers  for  long 
deployments  while  he  pointed  out  a 
well-equipped  gymnasium  and  separate 
recreation  area  filled  with  games,  a  bar, 
television,  and  comfy-looking  chairs  and 
sofas. 

Crew  comfort  is  important  because 
Tonnerre  is  designed  for  extended  de¬ 
ployments,  d'Arvieu  explained.  The  com¬ 
bination  of  maintenance  and  repair  oper¬ 
ations  were  simplified  so  BPC  ships  will  be 
technically  available  350  days  a  year,  with 
an  average  annual  time  at  sea  of  200  days 
or  5,000  hours. 

Noise  reduction,  attractive  living  quar¬ 
ters,  appealing  recreational  options,  a 
passenger  elevator  and  good  food  help 
relieve  the  inevitable  facts  of  long  de¬ 
ployments:  extended  working  hours, 
boredom,  lack  of  privacy,  cramped  spaces 
and  unrelenting  noise. 

There  are  20  crewmembers  dedicated 
to  food  preparation,  serving  and  clean 
up  staffing  five  messes,  one  for  each  rank 
category.  The  crew  uses  a  self-service 
ramp  and  officers  are  served  seated. 

The  9,000  square-foot  fully  automated 
galley  is  centralized  and  includes  a  bak¬ 


ery  (think  buttery  croissants)  and  sepa¬ 
rate  workstations  for  preparing  meat 
and  vegetables.  If  needed,  the  ship  can 
carry  enough  food  for  70  days  to  feed  700 
troops,  said  Gaillard. 

A  glimpse  into  one  of  the  messes  re¬ 
vealed  shiny  stainless  steel  equipment, 
and  a  crewmember  dressed  in  a  spot¬ 
less  uniform  reminiscent  of  a  traditional 
French  chef  including  a  tall  pleated  toque. 

Tonnerre  meets  Hazard  Analysis  and 
Critical  Control  Points  (HACCP),  an  inter¬ 
national  standard  that  is  designed  to  en¬ 
hance  safety  throughout  the  food  chain 
by  preventing,  reducing  or  eliminating 
potential  biological,  chemical  and  physi¬ 
cal  food  hazards. 

But  meeting  HACCP  does  not  come  at 
the  expense  of  food  quality  or  taste.  As 
you  would  expect,  the  galley  serves  tradi¬ 
tional  French  cuisine. 

Gaillard  explained  that  BPC  ships  com¬ 
ply  with  MARPOL  international  antipollu¬ 
tion  standards,  and  no  waste  is  disposed 
of  at  sea.  Instead,  the  trash  is  sorted, 
compressed  and  stored  for  recycling  or 
disposal.  He  said  that  even  though  mili¬ 
tary  ships  are  exempt  from  the  MARPOL 
standard,  the  French  Minister  of  Defense 


requested  that  the  French  Navy  comply 
with  the  requirement,  and  he  personally 
inspected  the  trash  system  in  a  visit  to 
Tonnerre. 

Combat  Vehicles  and  Helicopters 

Tonnerre  has  the  payload  capacity  and 
versatility  to  carry  up  to  16  heavy  helicop¬ 
ters  and  one-third  of  a  mechanized  regi¬ 
ment,  plus  two  Landing  Craft  Air  Cushion 
(LCAC)  hovercrafts  or  up  to  four  Landing 
Craft  Units  (LCU). 

Another  configuration  would  allow  the 
well  deck  to  hold  60  combat  vehicles  in¬ 
cluding  13  Leclerc  tanks.  Troops  board 
the  vehicles  on  two  vehicle  decks  cover¬ 
ing  more  than  3,000  square  yards. 

The  flight  deck  spans  more  than  an  acre 
and  incorporates  six  helo  landing  pads, 
one  of  which  is  suitable  for  the  Super 
Stallion.  The  U.S.  Marines  use  the  Super 
Stallion  for  a  variety  of  operations  that  in¬ 
clude  delivering  supplies  and  transport¬ 
ing  troops  and  equipment  and  also  for 
assault  missions. 

Tonnerre's  hangar  is  also  fitted  with 
workshops  designed  to  carry  out  any 
type  of  maintenance  on  board. 

Access  to  the  flight  deck  is  provided  by 


FS  Tonnerre  is  a  multipurpose  ship  designed  to  ■  i<#"p  ■ 

conduct  amphibious  operations;  evacuation  and 
disaster  relief  operations;  flagship  and  command 
and  control  of  a  multinational  force;  and  trans¬ 
portation  for  troops  and  freight.  Operating  under  these  conditions,  the  ship  can  carry  out  embarkation  and  disem¬ 
barkation  operations  on  beaches  and  in  poorly  equipped  ports.  In  these  photos  crewmembers  train  for  the  variety  of 
missions  they  may  be  called  upon  to  perform. 
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two  aircraft  elevators  with  a  unit  capacity 
of  13  tons.  The  air  installations  include  a 
Decca  Bridgemaster  DRBN-38A  approach 
radar;  a  Glide  Slope  Indicator,  an  instru¬ 
ment  landing  system  for  vertical  guid¬ 
ance;  and  a  Horizon  Reference  System. 

Medical  Services 

Tonnerre  boasts  a  modern  8,000 
square-foot  hospital  consisting  of  20 
rooms,  including  a  dental  suite,  triage 
room,  radiology  room,  two  operating 
theaters  and  a  burn  treatment  center. 
There  are  about  70  beds,  19  of  which  are 
designed  for  intensive  care.  The  capacity 
of  the  hospital  can  be  increased  by  an  ad¬ 
ditional  50  beds. 

The  helicopter  hangar  can  be  convert¬ 
ed  into  a  field  hospital  by  the  deployment 
of  Army  Medical  Service  Technical  Equip¬ 
ment  Modules  to  expand  services.  The 
hospital  is  fitted  for  telemedicine  and  has 
a  CT  scanner. 

Routinely,  the  ship  has  a  medical  doctor 
and  two  nurses  aboard.  If  needed,  modu¬ 
lar  elements  can  be  added  to  provide 
four  surgical  rooms  and  accommodate  a 
100-person  medical  team,  including  12 
surgeons. 


Sea  Trials 

Tonnerre  was  commissioned  in  August 
2007  after  a  long  endurance  mission  for 
comprehensive  sea  trials.  Since  then  the 
ship  has  conducted  several  operational 
deployments. 

The  aim  is  to  qualify  the  ship  in  various 
environments,  such  as  cold  and  warm  wa¬ 
ters  and  rough  seas,  and  verify  that  she 
meets  the  requirements  to  fulfill  her  mis¬ 
sions.  The  call  in  Norfolk  was  scheduled 
ahead  of  a  tactical  training  in  which  her 
interoperability  with  the  U.S.  Marines  and 
their  equipment  will  be  verified. 

The  Bataan  ESG  is  also  working  to  meet 
training  requirements  in  preparation  for 
its  upcoming  deployment.  COMPTUEX  is 
the  second  of  three  at-sea  exercises  de¬ 
signed  to  prepare  Bataan's  crew. 

Capt.  Sotherland  said  working  with 
Tonnerre's  crew  will  help  prepare  the 
Bataan  ESG  for  future  maritime  partner¬ 
ships.  "No  one  nation  can  do  it  alone.  The 
success  of  our  maritime  strategy  depends 
on  continued  interaction  with  the  world's 
navies." 

“Hormeur,  Patrie,  Valeur,  Discipline ” 

Even  after  the  impressive  tour  of  Ton¬ 


nerre,  what  remains  most  memorable  is 
Tonnerre's  officers  and  crew,  their  pride 
in  their  ship  and  their  graciousness.  Dur¬ 
ing  the  tour,  officers  and  crew  enthusias¬ 
tically  joined  the  group  eager  to  explain 
Tonnerre's  operations. 

French  Navy  Midshipmen  Aurelien 
de  Montgolfier  and  Fabien  Hermant  ex¬ 
plained  flight  deck  operations.  They  are 
students  who  attend  a  defense  college  in 
Paris  run  by  the  French  Defense  Ministry. 
As  part  of  their  training,  they  had  a  choice 
of  deploying  with  the  French  Army  or 
Navy  and  chose  the  Navy.  It  is  their  first 
time  away  from  home  for  an  extended 
period.  They  both  said  they  liked  life 
aboard  Tonnerre,  they  were  learning  their 
craft,  and  the  senior  officers  had  taken 
them  under  their  wing,  often  using  meal¬ 
times  to  share  experiences. 

When  asked  if  life  aboard  the  ship  lived 
up  to  their  expectations,  without  hesita¬ 
tion,  Montgolfier  said,  "It's  not  what  we 
expect;  it's  what  the  [French]  Navy  ex¬ 
pects  of  us  [that  matters]."  CHIPS 

Editor's  Note:  Thank  you  to  the  officers  and  crew  of  FS 
Tonnerre  for  their  cooperation  in  verifying  the  accu¬ 
racy  of  the  facts  of  this  article. 


Tonnerre  and  the  antisubmarine  frigate  La  Motte- 
Piquet  joined  the  Bataan  ESG  and  embarked  Marines 
from  22nd  MEU  for  joint  interoperability  training  in 
COMPTUEX  in  February  off  the  Eastern  Seaboard.  All 

photos  courtesy  of  the  French  Navy  and  French  Navy  photographers  Mathieu  LeBresne  and  Ludovic  Picard, 
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Q&A  with  U.S.  Navy  Capt.  Jack  L.  Sotherland 

Commodore  of  the  USS  Bataan  Expeditionary  Strike  Group  and 
Commander  of  Amphibious  Squadron  Two  (PHIBRON  2) 

The  Bataan  Expeditionary  Strike  Group  participated  in  the  Composite  Training  Unit 
Exercise  off  the  North  Carolina  Coast  in  February.  The  strike  group  welcomed  participa¬ 
tion  from  the  French  command  and  projection  ship  FS  Tonnerre  (L9014) ,  as  well  as  the 
antisubmarine  frigate  La  Motte-Piquet.  Tonnerre  is  of  particular  interest  because  of  its 
unique  "off-the-shelf"  design.  Tonnerre  is  a  versatile  platform  designed  to  operate  far 
forward  and  to  support  action  during  complex  political  or  military  situations.  Her  in¬ 
novative  capabilities  significantly  enhance  the  French,  European,  NATO  and  coalition 
ability  to  fulfill  forward  presence  requirements. 

The  exercise,  scheduled  by  Commander,  U.S.  Second  Fleet,  was  evaluated  by  a  train¬ 
ing  team  led  by  Commander,  Strike  Force  Training  Atlantic.  COMPTUEX  is  important 
because  it  is  designed  to  shape  the  ESG  into  a  cohesive  team  ready  to  meet  a  variety 
of  missions.  It's  a  critical  step  in  the  pre-deployment  training  cycle  for  a  joint  task  force. 

This  is  the  first  time  that  Tonnerre  and  other  French  units  participated  and  conducted 
joint  interoperability  training  with  U.S.  Navy  and  Marine  units. 

Large-deck  multipurpose  amphibians,  LHDs,  like  Bataan  and  Tonnerre,  can  embark, 
transport,  deploy,  command  and  fully  support  all  elements  of  a  marine  expeditionary 
unit,  or  other  land  units,  inserting  forces  ashore  via  helicopters,  landing  craft  and  am 
phibious  vehicles.  They  can  also  be  used  for  disaster  relief,  transporting  medical  and 
humanitarian  assistance,  and  evacuation  of  civilians  in  a  civil  crisis  or  disaster. 

The  strike  group  is  comprised  of  the  amphibious  assault  ship  Bataan,  amphibious 
transport  dock  ship  Ponce,  amphibious  dock  landing  ship  Fort  McHenry,  guided-missile  cruiser  Anzio,  guided-missile  destroyers 
Porter  and  James  E.  Williams;  the  Los  Angeles-class  attack  submarine  Memphis  and  a  Marine  Landing  Force  from  the  22nd  Marine 
Expeditionary  Unit.  The  exercise  gives  Marines,  who  have  been  on  the  ground  in  Iraq  and  Afghanistan,  a  chance  to  flex  their  sea 
legs  and  train  with  the  gator  Navy. 

The  supply  ship  Kanawha,  frigates  Carr,  Doyle,  Hawes,  Kauffman,  Nicholas  and  Simpson;  Los  Angeles-class  attack  submarine 
Boise;  and  destroyers  Carney,  Cole  and  Bulkeley  also  participated. 

CHIPS  spoke  with  Capt.  Jack  L.  Sotherland  several  days  before  the  start  of  COMPTUEX.  Both  Sotherland  and  Tonnerre's  Com¬ 
manding  Officer  French  Navy  Capt.  Edmond  de  Vigouroux  d'Arvieu  were  anticipating  great  benefits  from  working  together. 


French  Navy  Capt.  Edmond  de  Vigouroux 
d'Arvieu,  commanding  officer  of  FS  Tonnerre 
welcomes  U.S.  Navy  Capt.  Jack  Sotherland, 
commodore  of  the  Bataan  ESG  and  com¬ 
mander  of  PHIBRON  2,  aboard  Tonnerre  pier- 
side  at  Norfolk  Naval  Base  in  preparation  for 
COMPTUEX.  Photo  courtesy  of  French  Navy 
photographer  Mathieu  LeBresne. 


Q:  Can  you  talk  about  what  your  hopes  are 
for  COMPTUEX? 


Sotherland:  I  have  been  in  command 
since  August  of  last  year,  and  we  started 
working  up  with  the  strike  units  and 
started  liaison  with  the  French  Navy  at 
that  same  time.  The  goal  of  COMPTUEX  is 
to  certify  the  Bataan  Strike  Group  to  per¬ 
form  the  full  range  of  military  operations 
with  an  eye  toward  major  combat  opera¬ 
tions  and  everything  that  falls  within  that, 
for  example,  humanitarian  assistance,  di¬ 
saster  relief,  and  maritime  security  opera¬ 
tions  supporting  our  maritime  strategy. 


Based  on  our  country's  maritime  strat¬ 
egy  ("A  Cooperative  Strategy  for  21  st  Cen¬ 
tury  Seapower")  that  came  out  a  couple 
of  years  ago,  we  work  with  our  coalition 
partners  and  other  allied  and  partner  na¬ 
tions  such  as  the  French  and  the  French 
Navy.  They  bring  capabilities  that  we 
can  build  on  —  that  interoperability  that 
Capt.  d'Arvieu  was  talking  about  during 
his  brief.  The  Tonnerre  has  very  similar  ca¬ 
pabilities  inherent  in  our  own  dock  land¬ 
ing  ships  (LSDs). 

We  do  these  operations  early  on  so  that 
when  we  actually  deploy,  whether  it  is 
working  in  U.S.  Africa  Command,  the  6th 


Fleet  area  of  responsibility  in  the  Medi¬ 
terranean,  or  in  the  U.S.  Central  Com¬ 
mand  AOR,  if  we  come  across  the  Ton¬ 
nerre  or  other  French  ships,  our  staffs  and 
our  crews  will  be  able  to  talk  the  same 
language. 

The  French  Navy,  as  everybody  knows, 
has  been  one  of  our  closest  allies  since 
our  country  was  formed  in  the  18th  cen¬ 
tury.  We  have  always  had  a  very  close 
relationship  with  the  French  military,  the 
French  Navy  in  particular. 

French  sailors  were  able  to  operate 
our  Landing  Craft  Air  Cushion  (LCAC) 
vessels  at  an  early  stage,  their  well  deck 
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was  designed  to  operate  those,  as  well 
as  our  Landing  Craft  Utilities,  the  LCUs, 
which  are  huge  workhorses.  Because  we 
have  that  interoperability,  we  can  bring 
our  platforms  over  to  their  ships  and  vice 
versa. 

The  Bataan  Strike  Group  will  be  the 
first  strike  group  to  deploy  with  MV-22s, 
the  Marines'  variant  of  the  Osprey,  as  part 
of  their  air  combat  element.  That  is  a  sig¬ 
nificant  capability.  If  we  are  eventually 
authorized  to  land  and  operate  off  large 
French  units,  it  increases  our  reach  and 
our  ability  to  do  our  missions. 

The  French  will  work  with  our  Marine 
brethren  putting  troops  ashore  and  con¬ 
ducting  relief  missions  from  the  sea.  To  do 
that,  we  use  amphibious  shipping,  which 
traditionally  uses  LCACs  and  LCUs,  and 
then  our  H-53s  (Sea  Stallion)  and  MV-22s, 
to  bring  troops  to  shore. 

We  also  have  surface  combatants  as¬ 
signed  to  the  strike  group.  They  provide 
not  just  protection  for  units  in  amphibi¬ 
ous  ships,  they  also  provide  offshore  ar¬ 
tillery  support  to  the  Marines.  That's  rela¬ 
tively  new  to  be  able  to  integrate  that  into 
our  operations. 

The  Bataan  ESG  is  graded  with  the 
same  criteria  as  a  carrier  strike  group. 
We  have  the  same  number  of  ships.  The 
major  difference  is  our  striking  power  is 
different;  instead  of  an  air  wing  outfitted 
with  tactical  strike  aircraft,  U.S.  Marines 
comprise  our  striking  power,  as  well  as 
Tomahawk  missiles  that  we  employ  from 
our  assigned  cruiser  and  destroyers. 

This  is  what  we  will  do:  We  go  out  to 
sea;  we  embark  Marines  at  Morehead  City 
in  North  Carolina,  and  immediately  go 


into  various  scenarios  that  will  stress  the 
command  and  control  of  the  strike  staff, 
as  well  as  the  22nd  Marine  Expeditionary 
Unit. 

We  do  this  with  an  eye  to  make  sure 
that  we  can  communicate  well  with  each 
other,  and  we  can  execute  the  mission 
when  we  are  called  on  from  the  combat¬ 
ant  commander. 

After  we  have  done  an  amphibious 
landing  at  about  the  two-week  mark,  we 
will  put  the  Marines  ashore  in  an  amphibi¬ 
ous  assault,  and  then  we  will  concentrate 
primarily  on  the  blue  side  of  certifications, 
which  runs  the  gamut  of  antisubmarine 
warfare,  air  defense  exercises,  maritime 
interdiction  operations,  to  maritime  secu¬ 
rity  operations. 

We  spread  the  strike  force  along  the 
entire  Eastern  Seaboard  from  VACAPES 
(Virginia  Capes)  all  the  way  down  to  the 
Jacksonville,  Florida  OPAREA  (operations 
area). 

That  is  somewhat  unusual,  but  we  have 
to  do  that  this  time  of  year  because  the 
weather  in  the  VACAPES  and  North  Caro¬ 
lina  is  rather  unpredictable,  and  there  is  a 
lot  of  training  that  we  could  not  perform 
safely  if  we  were  not  able  to  go  into  the 
warmer,  and  to  a  degree,  calmer  waters 
of  Florida.  That's  where  we  do  a  lot  of  our 
maritime  interdiction  operations. 

It  also  gives  us  a  good  chance  to  stress 
our  command  and  control  using  satel¬ 
lite  links,  our  voice  communications,  and 
other  command  and  control  upgrades 
that  we  have  received  in  the  last  couple 
of  years. 

The  Bataan  just  got  back  from  her  last 
deployment  about  a  year  ago,  so  it  is  a 


relatively  quick  turn-around.  It  is  our  way 
of  supporting  maritime  strategy  and  the 
fleet  readiness  program  that  the  Chief  of 
Naval  Operations  has  developed. 

Q:  When  is  COMPTUEX going  to  play  out? 

Sotherland:  It  takes  place  the  entire 
month  of  February.  There  is  a  short  turn¬ 
around  after  that  because  COMPTUEX 
is  the  Navy's  certification  for  my  strike 
group  and  most  of  March  is  booked  with  a 
Marine  certification  exercise.  The  Marines 
tell  us  where  they  need  to  be  to  perform 
their  mission,  and  it  is  my  job  to  get  them 
there  safely. 

This  is  not  something  new,  but  training 
with  the  French  has  not  yet  become  rou¬ 
tine.  The  last  few  COMPTUEXs,  whether 
they  involved  a  carrier  strike  group,  or  an 
amphibious  group,  utilized  other  allied 
nations  to  participate.  It  is  a  win-win  for 
everybody. 

Regardless  of  where  the  Bataan  Strike 
Group  goes,  we  are  going  to  be  interoper¬ 
able,  whether  it  is  operating  with  coalition 
allies,  NATO  allies,  or  other  close  partners. 

Believe  it  or  not,  we  occasionally  can  be 
challenged  when  communicating  with 
our  British  allies  because  sometimes  they 
don't  use  the  same  terms  or  language 
that  we  are  familiar  with. 

Coming  up  with  standard  phraseology 
and  developing  a  common  operating 
picture  of  where  we  are  and  how  we  dis¬ 
seminate  contacts  and  other  information 
across  the  link  and  how  we  will  work  to¬ 
gether  is  the  only  way  we  can  get  better. 

I  was  at  NAVCENT  (U.S.  Naval  Forces 
Central  Command,  U.S.  5th  Fleet)  for 


Bataan  ESG  Commodore  and  Commander  PHIBRON  2  U.S.  Navy  Capt.  Jack  Sotherland,  FS  Tonnerre  Commanding  Officer  French  Navy  Capt.  Edmond  de  Vigouroux 
d'Arvieu  and  U.S.  Navy  Capt.  Brian  Goulding  from  Commander,  Strike  Force  Training  Atlantic  aboard  Tonnerre.  At  right,  a  Marine  from  22nd  MEU  prepares  for  joint 
interoperability  training  with  Tonnerre's  crew.  Photos  by  French  Navy  photographer  Mathieu  LeBresne. 
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18  months  before  coming  here,  and  I 
worked  closely  with  the  French  Navy  be¬ 
cause  they  had  command  of  Combined 
Task  Force  150  for  a  time;  CTF  150  has  re¬ 
sponsibility  for  millions  of  square  miles  of 
water  off  the  Horn  of  Africa,  the  Red  Sea 
and  the  Gulf  of  Aden. 

Working  with  all  those  navies  [in  CTF 
150],  allows  us  to  further  develop  the 
capacities  and  capabilities  of  navies  and 
coast  guards  that  are  expanding  their 
reach  further  seaward,  some  for  the  first 
time. 

Q:  Can  you  talk  about  how  you  will  use  the 
ships  in  COMPTUEX? 

Sotherland:  We  have  six  ships  in  the  strike 
group.  All  have  flight  decks,  but  only  the 
amphibs  have  well  decks.  It  is  this  capa¬ 
bility  that  gives  a  strike  group  the  oppor¬ 
tunity  to  expand  our  options.  And  the 
participation  of  Tonnerre  gives  my  staff, 
as  well  as  the  22nd  MEU,  much  greater 
flexibility. 

If  I  am  using  the  Bataan  as  a  command 
and  control  ship  doing  one  part  of  a  non- 
combatant  evacuation  mission,  now  I 
may  be  able  to  move  the  Bataan  closer  in 
and  use  the  Tonnerre  as  a  receiving  ship. 

We  really  don't  have  a  lot  of  excess 
space  on  the  Bataan.  If  you  come  on 
board  during  COMPTUEX,  there  is  no 
room.  We  have  10  MV-22s,  and  they  bring 
a  lot  of  maintenance  requirements  for 
people,  parts  and  supplies. 

If  we  had  to  bring  a  lot  of  people  on¬ 
board  the  Bataan,  it  would  be  a  tight  fit, 
but  having  the  advantage  of  another  ship, 
that  is  almost  as  large  and  has  more  space 
internally  (because  she  doesn't  support 
as  many  aircraft,)  is  an  advantage.  And 
remember,  we  have  the  usual  comple¬ 
ment  of  Marine  and  Navy  helicopters  and 
AV-8B  Harriers  that  share  the  deck  and 
hangar  spaces,  totaling  29  aircraft. 

I  can  say  now  that  we  have  positioned 
Tonnerre,  that  we  are  positioned  to  aug¬ 
ment  for  medical  facilities.  Doctors  all 
speak  the  same  language. 

If  we  had  'persons  under  control'  or  we 
had  captured  pirates,  the  national  rules  of 
engagement  that  France  operates  under 
allow  her  [Tonnerre]  more  flexibility  to 
take  those  pirates,  process  them  and  get 
them  to  another  country. 

If  I  remember  correctly,  there  was  a 
French  yacht  pirated  in  2008.  The  French 
overcame  the  pirates,  captured  some  of 


them  and  transported  them  to  Paris  [after 
extradition  was  granted  by  Somali  au¬ 
thorities]  to  stand  trial. 

Their  rules  allow  them  to  do  that;  our 
rules  probably  would  not  have  allowed 
that  so  we  take  advantage  of  what  the 
French  can  do  in  the  strike  group. 

Part  of  my  staff's  responsibility,  and 
every  ship's  responsibility,  is  to  maintain 
a  matrix  of  national  rules  of  engagement 
that  tells  us  what  the  United  States  can 
do,  what  the  British  can  do,  what  the  Ger¬ 
mans  can  do,  and  so  on. 

Over  the  last  five  years  in  COMPTUEX, 
we  have  seen  a  greater  interoperabil¬ 
ity  and  ability  to  take  advantage  of  the 
strengths  of  each  of  the  participants. 

Q:  Can  you  discuss  the  technology  you  will 
use  with  the  French  Navy  in  this  exercise? 

Sotherland:  A  lot  of  it  will  be  command 


and  control.  They  use  a  lot  of  the  same 
link  architecture,  and  we  have  the  ability 
to  digitally  talk  to  one  another  and  dis¬ 
play  various  contacts. 

The  technology  on  Tonnerre  is  highly 
integrated  which  allows  it  to  operate  with 
a  much  smaller  crew.  That  is  eye-opening 
to  me  and  because  of  that  we  can  prob¬ 
ably  stress  them  [French  crew]  much  fast¬ 
er  in  high-tempo  operations.  We  would 
probably  augment  them  with  additional 
liaison  officers  to  advise  them  on  what  we 
are  doing. 

We  don't  operate  with  them  as  part 
of  NATO  yet,  but  in  a  bilateral  operation. 
That  is  why  we  currently  only  have  the 
French  Navy  presence  for  this  exercise. 

They  do  not  bring  any  new  revolution¬ 
ary  technology.  It  is  just  much  more  au¬ 
tomated  and  not  as  manpower  intensive. 

Q:  Will  you  be  using  the  Combined  Enter- 


The  Bataan  ESG  is  made  up  of 
amphibious  assault  ship  USS 
Bataan  (LHD  5);  amphibious 
transport  dock  ship  USS  Ponce 
(LPD  15);  amphibious  dock 
landing  ship  USS  Fort  McHenry 
(LSD  43);  guided-missile  cruiser 
USS  Anzio  (CG  68);  guided- 
missile  destroyers  USS  Porter 
(DDG  78)  and  USS  James  E. 
Williams  (DDG  95);  the  Los 
Angeles  class  attack  submarine 
USS  Memphis  (SSN  691)  and  a 
Marine  Landing  Force  from  the 
22nd  Marine  Expeditionary  Unit. 

Also  participating  in 
COMPTUEX  are:  USNS  Kanawha 
(T-AO  196),  USS  Carr  (FFG  52), 
USS  Simpson  (FFG  56),  USS 
Boise  (SSN  764),  USS  Cole  (DDG 
67),  USS  Bulkeley  (DDG  84),  USS 
Hawes  (FFG  53),  USS  Kauffman 
(FFG  59),  USS  Doyle  (FFG  39), 
USS  Carney  (DDG  64),  USS 
Nicholas  (FFG  47),  and  FS  La 
Motte-Picquet  (D  645)  and  FS 
Tonnerre  (L9014).  COMPTUEX 
was  conducted  in  February  on 
the  Eastern  Seaboard. 
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ATLANTIC  OCEAN  (Feb.  3,  2009)  Capt.  Sam  Howard,  com¬ 
manding  officer  of  the  multipurpose  amphibious  assault  ship 
USS  Bataan  (LHD  5)  and  Capt.  Kris  Croeber,  executive  officer, 
oversee  preparations  before  going  to  sea.  Bataan  is  conduct¬ 
ing  composite  training  unit  exercise  (COMPTUEX)  to  prepare 
for  a  scheduled  deployment  later  this  year.  U.S.  Navy  photo  by 
Mass  Communication  Specialist  3rd  Class  Stephen  Oleksiak. 
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ATLANTIC  OCEAN  (Feb.  18, 2009)  Seaman  Jack  Brown  stands  aft  lookout  watch  aboard  the  mul¬ 
tipurpose  amphibious  assault  ship  USS  Bataan  (LHD  5).  Bataan  is  participating  in  a  composite 
training  'unit  exercise  with  members  of  the  Bataan  Expeditionary  Strike  Group.  U.S.  Navy  photo 
by  Chief  Mass  Communication  Specialist  Tony  Sisti. 


prise  Regional  Information  Exchange  Sys¬ 
tem  to  communicate  with  the  French  Navy? 

Sotherland:  CENTRIXS  is  the  coalition 
status  quo  for  us  to  communicate.  Every¬ 
thing  that  we  have  needs  to  go  on  the 
CENTRIXS  Web  site  first  because  if  they 
[French  Navy]  do  not  know  what  our  in¬ 
tents  are  and  what  we  want  them  to  do, 
then  we  are  not  effective.  CENTRIXS  is  the 
command  and  control  linkage  Web  server 
that  we  will  be  using. 

Q:  Can  you  talk  about  some  of  the  areas 
where  you  hope  to  learn  from  the  French? 

Sotherland:  Our  Navy  has  recognized  that 
as  Americans  we  have  a  tendency  to  be 
inward-looking  as  a  culture,  and  despite 
the  U.S.  Navy  having  been  a  presence 
globally  for  so  many  decades,  I  don't  think 
we  have  done  a  very  good  job  in  the  past 
about  learning  to  adapt  to  other  cultures, 
but  this  has  been  recognized,  and  there 
are  a  number  of  programs  that  the  Navy  is 
leveraging  that  will  close  this  culture  gap. 

One  of  the  most  significant  efforts  is 
the  Center  for  Language,  Regional  Ex¬ 
pertise  and  Culture,  referred  to  as  CLREC, 
and  I  have  relied  heavily  on  them  to  train 
my  staff  to  better  prepare  us  for  our 
deployment. 

It  is  not  just  the  culture  in  the  Middle 
East,  but  in  Europe,  in  the  ports  of  Africa 
or  along  the  Mediterranean  —  pulling 


into  Indonesia  would  be  different  than 
pulling  into  Egypt. 

Having  cultural  sensitivity,  knowing  the 
basics  of  language,  how  to  talk  to  a  dif¬ 
ferent  nation,  a  different  people,  and  not 
expect  them  to  be  like  Americans,  is  one 
of  the  biggest  things  we  learn  from  the 
French. 

In  the  Indian  Ocean,  the  French  have 
engaged  with  many  countries  from  a 
maritime  perspective  for  hundreds  of 
years.  If  we  are  going  to  Dakar  or  Guinea, 
I  should  pick  up  the  phone  and  talk  to  my 
counterpart  in  the  French  Navy  and  ask 
what  he  knows  about  this  port  and  this 
people,  and  how  not  to  offend  them. 

How  do  I  carry  our  message  without 
seeming  arrogant,  and  how  do  I  limit  be¬ 
havior  that  could  be  interpreted  as  arro¬ 
gant?  What  do  we  usually  do  when  we  go 
to  a  foreign  country?  Americans  usually 
talk  loud  and  with  our  hands  and  expect 
to  be  understood. 

Part  of  my  responsibility  to  my  staff, 
and  the  ships  assigned  to  me,  is  to  im¬ 
prove  cultural  awareness,  provide  rudi¬ 
mentary  language  training,  and  find  out 
who  speaks  the  national  language  within 
the  crew. 

I  am  lucky  that  a  number  of  members  of 
my  staff  speak  Arabic.  We  also  have  some 
Spanish  and  some  French  speakers.  We 
utilize  them  not  just  as  translators  but  as 
cultural  points  of  contact. 

I  love  working  with  the  French,  Dutch 


and  Italians,  just  to  name  a  couple  of  the 
far-reaching  navies,  because  they  have 
presence.  For  instance,  the  French  Navy  is 
everywhere  the  U.S.  Navy  is  —  the  Carib¬ 
bean,  Indian  Ocean  and  Pacific.  They  are 
very  capable,  and  they  have  built  hun¬ 
dreds  of  years  of  interaction  with  other  na¬ 
tions.  We  can  go  to  our  coalition  partners, 
so  we  do  not  have  to  reinvent  the  wheel. 

Q:  Do  you  have  a  representative  from 
the  State  Department  participating  in 
COMPTUEX? 

Sotherland:  That  is  an  excellent  idea,  and 
we  have  identified  it  as  a  core  compe¬ 
tency  that  we  should  have,  but  the  State 
Department  is  still  a  small  organization 
when  compared  to  the  Navy. 

We  mitigate  that  with  political  advisers 
that  are  assigned  to  the  various  combat¬ 
ant  commanders  as  well  as  some  of  their 
service  components.  Every  one  of  the 
staffs  that  I  deal  with,  whether  it  is  6th 
Fleet  or  5th  Fleet,  has  a  political  adviser. 
They  are  my  points  of  contact. 

NAVCENT  also  has  liaison  officers  that 
are  stationed  in  the  embassies  of  many  of 
the  countries  within  the  CENTCOM  AOR. 
They  are  there  to  facilitate  any  interac¬ 
tion  I  have  with  any  nation's  military  or 
government. 

It  works  very  smoothly.  I  am  looking 
forward  to  doing  more  bilateral  and  mul¬ 
tilateral  exercises  in  support  of  both  the 
maritime  strategy  and  the  various  TSCs,  or 
Theater  Security  Cooperation  strategies. 

Our  overall  mission  is  that  we  have  to  be 
ready  to  do  major  combat  operations  any 
time  and  everything  else  builds  on  that. 
Putting  Marines  ashore  in  Landing  Craft 
Air  Cushions  uses  the  same  mechanics  as 
moving  civilians  on  and  off  the  beach  for 
an  evacuation. 

As  we  saw  with  the  USS  Kearsarge  (LHD 
3)  during  Continuing  Promise  in  Haiti 
after  the  hurricanes  hit,  that's  a  military 
operation.  In  that  case,  we  were  helping 
the  indigenous  people  help  themselves 
by  providing  airlift,  manpower,  food  and 
supplies. 

There  were  no  trigger-pullers  —  we 
were  not  there  to  take  over  the  country 
—  we  were  there  to  help.  CHIPS 

For  more  information  about  the  Bataan,  go  to  Navy 
News  at  www.navy.mil  or  contact  the  public  affairs 
officer  at  pao@hd5.navy.mil. 
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INFORMATION  ASSURANCE  VULNERABILITY  COMPLIANCE 
TRACKING  AND  REPORTING  FOR  U.S.  NAVY  SHIPS 

Automating  afloat  network  patch  management  examinations  for  fleet  I  AMs 


By  Lt.  Cmdr.  Ricardo  Vigil 

The  protection  of  Navy  shipboard  net¬ 
works  is  critical  to  national  security.  An 
important  part  of  maintaining  a  secure 
network  posture  is  the  timely  application 
of  software  maintenance  patches. 

In  response  to  this  need,  the  Computer 
and  Network  Security  Branch  at  Space 
and  Naval  Warfare  (SPAWAR)  Systems 
Center  Pacific  (SSC  Pacific)  developed 
the  Vulnerability  Remediation  Asset  Man¬ 
ager  (VRAM),  a  new  Web  portal  initiative 
designed  to  assist  ships  in  achieving  In¬ 
formation  Assurance  Vulnerability  (IAV) 
compliance. 

The  tool  is  used  by  both  the  Computer 
Network  Defense-in-Depth  Baseline  As¬ 
sessment  (CNDIDBA)  teams  and  ship¬ 
board  personnel  to  verify  shipboard  IAV 
compliancy. 


An  independent  team  of  Computer 
Network  Defense  (CND)  experts  executes 
a  CNDIDBA  during  each  ship's  unit  level 
training  phase.  The  CNDIDBA  consists 
of  an  IAV  compliance  scan,  a  password 
policy  assessment  and  various  security 
checks  on  the  Common  PC  Operating 
System  Environment  (COMPOSE). 

The  independent  CNDIDBA  team  per¬ 
forms  the  IAV  compliance  portion  using 
the  Secure  Configuration  Compliance 
Validation  Initiative  (SCCVI)  tool.  Each 
ship  must  complete  a  baseline  assess¬ 
ment  every  24  months  or  within  60  days 
following  a  systems  upgrade  or  major 
configuration  change  to  the  network. 

COMPOSE  combines  commercial  off- 
the-shelf  and  government  off-the-shelf 
products  that  deliver  directory  services, 
e-mail,  Web  acceleration,  office  auto¬ 
mation  applications,  collaboration  tools 
and  antivirus  software  for  the  Integrated 
Shipboard  Network  System  (ISNS),  Com¬ 
bined  Enterprise  Regional  Information 
Exchange  System  (CENTRIXS),  Sensitive 
Compartmented  Information  (SCI)  net¬ 
works,  and  Submarine  Local  Area  Net¬ 
work  (SubLAN). 


COMPOSE  delivers  these  services  to  the 
warfighter  in  a  secure  software  bundle 
that  aligns  to  the  latest  Defense  Informa¬ 
tion  Systems  Agency  (DISA)  standards 
and  guidelines. 

SCCVI  is  currently  employed  as  eEye 
Digital  Security's  Retina©  Network  Se¬ 
curity  Scanner;  it  is  DISA's  tool  of  choice 
for  network  vulnerability  scanning  within 
the  Defense  Department.  Its  use  is  man¬ 
dated  by  Navy  Cyber  Defense  Operations 
Command  (NCDOC)  Computer  Tasking 
Order  (CTO)  06-02.  Monthly  scans  are  also 
conducted  by  ship's  personnel  to  identify 
and  mitigate  network  vulnerabilities  as 
they  are  discovered.  This  requirement, 
mandated  by  NCDOC  CTO  06-02,  is  in 
response  to  increased  attacks  on  Navy 
networks. 

To  assist  the  fleet  with  meeting  these 
monthly  requirements,  Program  Execu¬ 
tive  Officer  for  Command,  Control,  Com¬ 
munications,  Computers  and  Intelligence 
(PEO  C4I),  Program  Manager  Warfare 
for  Tactical  Networks  (PMW  160)  fielded 
SCCVI  on  afloat  networks. 

SCCVI  enables  the  fleet  to  scan  its  net¬ 
works  and  aggressively  track  compliance 
within  the  IAV  Management  (IAVM)  pro¬ 
gram.  SCCVI  provides  the  ship's  informa¬ 
tion  assurance  manager  an  independent 
analysis  of  installed  IAV  patches. 


Missing  patches  identified  by  SCCVI  are 
downloaded,  from  SPAWAR's  Naval  Net¬ 
works  Web  site,  installed  and  pushed  to 
the  vulnerable  machines. 

The  Naval  Networks  Web  site  is  the 
only  authorized  repository  for  download¬ 
ing  patches  for  all  PMW  160  programs  of 
record  (POR)  such  as  the  COMPOSE  net¬ 
work  systems.  Each  ship  is  responsible  for 
achieving  100  percent  compliance  for  all 
networked  systems  for  which  an  IAV  ex¬ 
ists  and  for  which  a  fix  has  been  released 
by  the  respective  POR  office. 

However,  a  major  difficulty  with  the  use 
of  SCCVI  is  that  it  does  not  cross-reference 
scan  results  with  patches  released  by  the 
respective  POR  office.  For  example,  re¬ 
sults  for  a  SCCVI  scan  for  COMPOSE  would 
include  all  missing  patches  whether  or 
not  the  patches  are  approved  by  the 
COMPOSE  program  office. 

Until  recently,  it  was  the  responsibility 
of  either  the  ship's  1AM  or  the  CNDIDBA 
team  to  manually  parse  SCCVI  results  and 
determine  which  lAVs  were  ship's  force 
fixable  or  unfixable  patches. 

Fixable  lAVs  are  patches  released  by 
the  responsible  POR  office.  Unfixable 
lAVs  are  patches  that  have  been  identi¬ 
fied  by  the  program  office  but  have  not 
yet  been  released.  Ships  are  not  respon¬ 
sible  for  installing  unfixable  patches  until 
the  responsible  program  office  releases  a 
patch. 

To  remedy  this  situation,  SSC  Pacific 
launched  VRAM,  in  conjunction  with  the 
Fleet  Numerical  Meteorology  and  Ocean¬ 
ography  Center  located  in  Monterey, 
Calif.,  to  automate  the  manual  parsing  of 
the  SCCVI  results  as  well  as  establish  a  re¬ 
pository  for  the  scan  data. 

VRAM  enables  the  ship's  1AM  to  track 


Scan  Summaries 

Scan  Date:  TUE  FEB  24  22:01:00  UTC  2009 

Report:  USS  NEVERSAIL-SCAN  FOR  COMPOSE  3.0.x-  TUE  FEB  24  22:01:00  UTC  2009 

Total  Number  of  Hosts  Scanned:  88 

Total  Number  of  Hosts  Fully  Patched:  2  (2%  hosts  fully  patched) 

Total  Number  of  Patches  Available:  182 

Total  Number  of  Patches  Fully  Applied:  152  (83%  patches  fully  applied) 


Fixable 

Unfixable 

Total 

IAVA 

14 

4 

18 

IAVB 

12 

5 

17 

IAVT 

4 

4 

8 

Figure  1.  VRAM  scan  summaries  report  page. 
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and  monitor  compliance  with  lAVs  by  re¬ 
moving  the  labor-intensive  manual  end- 
user  process  of  cross-referencing  SCCVI 
scan  results  with  approved  patches  on 
the  Naval  Networks  Web  site. 

To  better  understand  the  connection 
and  synergy  between  SCCVI  and  VRAM, 
let  us  step  through  a  typical  vulnerabil¬ 
ity  scan  of  a  shipboard  network  running 
COMPOSE. 

The  ship's  1AM  would  first  install  and 
then  launch  the  vulnerability  scanner 
from  a  workstation  that  is  connected  to 
either  the  unclassified  NIPRNET  or  classi¬ 
fied  SIPRNET  enclave. 

The  1AM  would  then  perform  a  dis¬ 
covery  scan  of  the  enclave  based  on  the 
active  subnets  to  identify  all  live  hosts. 
The  discovery  scan  results  would  then  be 
combined  into  various  address  groups, 
defined  as  a  collection  of  hosts  (servers 
or  workstations)  related  to  a  specific  POR 
system. 

For  example,  the  COMPOSE  address 
group  would  contain  only  COMPOSE 
hosts.  Once  all  of  the  address  groups  are 
created,  the  next  step  would  be  to  con¬ 
duct  an  IAV  audit  scan  of  each  group  to 
enumerate  a  list  of  vulnerabilities  on  each 
system. 

For  this  example,  let  us  continue  with 
the  COMPOSE  POR.  During  the  IAV  audit, 
the  scanner  connects  to  each  machine 
in  the  address  group  and  compares  the 


machine's  installed  patches  with  SCCVI's 
complete  list  of  IAV  patches. 

Once  the  audit  is  complete,  the  1AM 
exports  the  scan  results  by  generating  a 
Vulnerability  Management  System  (VMS) 
export  file  on  the  completed  scan.  In¬ 
stead  of  manually  trudging  through  the 
scan  results,  the  1AM  can  upload  the  VMS 
export  file  to  VRAM  where  it  is  parsed  and 
automatically  cross-referenced  with  all  of 
the  approved  patches  released  by  the 
COMPOSE  program  office. 

Once  the  VMS  file  is  uploaded,  VRAM 
will  output  results  similar  to  those  shown 
in  Figure  1. 

VRAM  provides  the  1AM  with  a  scan 
summaries  report  page  that  contains  the 
following  information: 

•  Total  number  of  hosts  scanned; 

•  Total  number  of  hosts  fully  patched; 

•  Total  number  of  patches  available; 

•  Total  number  of  patches  fully  applied; 

•  Number  of  fixable  IAV  Alerts,  Bulletins 
and  Technical  Advisories  missing;  and 

•  Number  of  unfixable  IAV  Alerts,  Bulle¬ 
tins  and  Technical  Advisories  missing. 

The  1AM  can  drill  down  from  the  scan 
summaries  report  into  the  remediation 
report  page. 

Here  the  1AM  can  choose  to  display  the 
results  as  follows: 


•  Vulnerability  by  Host  -  displays  all 
available  IAV  patches  missing  for  each 
host  scanned  (illustrated  in  Figure  2),  or 

•  Hosts  by  Vulnerability  -  displays  all  af¬ 
fected  hosts  for  each  available  IAV. 

The  1AM  would  then  use  the  IAV  links 
on  the  remediation  report  page  to  down¬ 
load  the  missing  fixable  patches  from  the 
Naval  Networks  Web  site  and  apply  these 
selected  patches  to  the  affected  hosts. 

The  use  of  VRAM  provides  a  huge  im¬ 
provement  for  monitoring  and  fixing  net¬ 
work  vulnerabilities.  Its  use  not  only  as¬ 
sists  ship  lAMs  in  aggressively  managing 
the  IAVM  program,  but  it  can  also  provide 
Immediate  Superior  in  Command  (ISIC), 
program  offices  and  other  computer  net¬ 
work  defense  organizations  with  visibil¬ 
ity  into  the  status  of  their  commands  or 
systems. 

There  are  three  types  of  VRAM 
accounts: 

/  Site  Administrator  -  the  user-based 
role  for  a  ship  1AM;  site  administrators 
are  able  to  upload  SCCVI  scan  results  and 
view  scan  summaries. 

/  Staff  Administrator  -  the  user-based 
role  for  ISICs  or  strike  group  information 
warfare  commanders;  staff  administra¬ 
tors  can  create  groups  of  several  ships 
to  view  the  "site  posture,"  i.e.,  track  each 
unit's  IAV  compliance  trends. 

/  Program  Office  -  the  user-based 
role  for  the  POR  office  to  manage  the  IAV 
patch  database  for  its  program,  view  the 
posture  of  its  cognizant  POR  systems,  or 
add  or  associate  a  unit  with  a  particular 
POR. 

VRAM  has  proven  its  usefulness  in  pro¬ 
viding  a  less  labor-intensive  means  for 
finding  network  vulnerabilities,  thus  im¬ 
proving  the  CNDIDBA  process  and  expe¬ 
diting  remediation  actions  —  as  well  as 
freeing  ship's  personnel  to  pursue  other 
critical  security  activities.  CHIPS 


Lt.  Cmdr.  Vigil  was  the  Computer  Network  Defense- 
in-Depth  Baseline  Assessment  project  officer  for 
SSC  Pacific.  He  is  currently  assigned  to  Space  and 
Naval  Warfare  Systems  Center  Bahrain.  Questions 
regarding  VRAM  and  SCCVI  can  be  directed  to 
ssc_pac_vram@navy.mil.  Questions  regarding  the 
CNDIDBA  evolution  can  be  directed  to  ssc_pac_ 
cndidba@navy.mil. 


Figure  2.  VRAM  remediation  report  page  -  Vulnerability  by  Host. 
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INFORMATION  ASSURANCE-TuicfattMaau  bmamnmOmiimkKB 

By  U.S.  Marine  Corps  Maj.  Jeffrey  Hammond  and  Mary  Purdy 


Because  of  a  300  percent  increase  in  cyber  attacks  on  Depart¬ 
ment  of  Defense  (DoD)  information  technology  (IT)  systems  and 
infrastructure,  there  is  a  critical  need  for  knowledgeable  command, 
control,  communications  and  computer  (C4)  personnel.  To  meet 
this  requirement,  during  2007  and  2008,  Brig.  Gen.  George  Allen, 
Headquarters  Marine  Corps,  Director  C4,  identified  C4  training  as  his 
No.  1  priority  to  aggressively  tackle  the  cyber  domain  warfighting 
mission. 

In  rapid  response,  the  Marine  Corps  Training  and  Education  Com¬ 
mand  (TECOM)  not  only  revamped  its  Marine  Corps  Communica- 
tions-Electronics  School  (MCCES)  classroom  training,  but  also  revo¬ 
lutionized  the  way  the  Marine  Corps  trains  and  now  commercially 
certifies  its  C4  personnel  through  Communication  Training  Centers. 
The  CTCs  are  collocated  with  all  three  Marine  Expeditionary  Forces 
(MEF)  and  provide  training  for  active  duty  and  reserve  Marines  and 
civilians  who  are  part  of  the  C4  community,  but  moreover,  for  any 
Marine  identified  as  part  of  the  Information  Assurance  (IA)  Work¬ 
force. 

DoD  Directive  8570.01  mandates  that  70  percent  of  the  IA  Work¬ 
force  must  be  commercially  certified  by  the  end  of  2009.  This  cre¬ 
ates  a  high  demand  for  commercial  certification  training.  Specific 
CTC-developed  courses,  which  respond  to  the  IA  mandate,  are  the 
CompTIA  A+,  Network  +,  Security  +,  and  International  Information 
Systems  Security  Certification  Consortium  (ISC)2  Certified  Informa¬ 
tion  System  Security  Professional  (CISSP)  certification  courses. 

In  addition  to  IA  certifications,  IA  technical  personnel  must  hold 
an  operating  system  (OS)  certification.  CTC  OS  courses  include  the 
Microsoft  IT  Academy,  Cisco  Networking  Academy  commercial 
courses,  and  the  Support  Wide  Area  Network  (SWAN)  Data  Inciden¬ 
tal  Operator  Training,  which  meets  the  OS  requirement  with  a  CTC 
certificate  of  accomplishment. 

U.S.  Marine  Corps  Maj.  Jeff  Hammond,  the  CTC  director,  invites 
commanders  to  reach  out  to  the  CTCs  located  in  California,  North 
Carolina  and  Okinawa  for  no-cost  initial  and  remedial  C4  training. 
The  CTCs  have  established  a  relationship  with  each  of  the  MEFs  and 
through  recently  signed  Memorandums  of  Agreement  have  estab¬ 
lished  their  role  with  and  in  support  of  their  regional  area. 

The  CTCs  are  equipped  to  provide  both  IA  and  OS  commercial 
certification,  but  more  importantly  provide  a  full  commercial  certifi¬ 
cation  testing  capability  for  IA  workforce  personnel.  Last  year  Ham¬ 
mond's  staff  offered  training  and  certification  to  more  than  840  Ma¬ 
rines  and  civilians.  This  year  he  intends  to  make  sure  all  classroom 
seats  are  filled  in  every  hosted  class,  and  therefore,  offers  standby 
seats  to  Navy  IA  workforce  personnel. 

The  CTCs  are  designed  to  relieve  the  already  burdened  operat¬ 
ing  force  staffs  from  the  administrative  burden  of  scheduling  com¬ 
mercial  training  and  managing  seat  quotas.  Commanders  simply 
request  training  from  their  local  center  and  assign  Marines  to  sched¬ 
uled  training.  Each  CTC,  with  its  respective  MEF,  co-chairs  a  quarter¬ 
ly  Communication  Training  Working  Group  (CTWG)  that  is  designed 
to  identify  training  requirements,  prioritized  by  need  and  schedule, 
to  support  regional  operations  and  exercise  tempo. 

At  a  time  when  most  operating  force  training  focused  on  equip¬ 
ment-based  training  in  support  of  the  global  war  on  terrorism,  the 
CTC  incorporated  both  fundamental  and  advanced  IA  training  to 


enable  better  security  for  DoD  networks.  The  CTC  staffs  are  a  mix 
of  military,  civilian  and  contractor  instructors  who  are  fully  trained 
and  certified  to  teach  Microsoft  and  Cisco  Academy  courses.  This 
crucial  step  enabled  Marine  Corps  commands  to  save  several  mil¬ 
lion  in  training  and  travel  dollars  and,  instead,  focus  their  efforts  on 
preparation  for  future  deployments. 

The  CTCs  training  regimen  complements  the  IA  training  in  MCCES 
formal  classrooms.  Both  matriculating  students,  as  well  as  operat¬ 
ing  force  returnees,  will  have  the  most  up-to-date  instruction  since 
using  commercially  developed  training  allows  quick  modifications 
to  the  curricula  to  keep  abreast  of  rapidly  changing  technology. 

For  information  on  CTC  class  dates  and  to  request  training,  go  to 
the  CTC  homepage  at:  https://www.29palms.usmc.mil/ctc/.  Select 
"Training  Schedules"  to  see  class  dates  or  "Warfighter  Training  Re¬ 
quest  Portal"  to  schedule  a  class. 


1 1 

*  * :f  § 

presented  by  DON  CIO  Mr.  Rob  Carey  and  Dep¬ 
uty  Director  C4/CIO  U.S.  Marine  Corps  Mr.  Jim  Craft  to  Capt.  Russell  Cromley, 
MCCES;  and  Maj.  Jeffrey  Hammond,  CTC. 


Goal  6  of  the  Department  of  the  Navy  Information  Management 
and  Information  Technology  Strategic  Plan,  Fiscal  Year  2008-2009, 
states:  "Develop  an  agile  and  integrated  IM  and  IT  total  force  capable 
of  implementing,  operating,  and  managing  the  power  of  the  NET." 
Both  the  formal  schoolhouse  and  the  CTC  curricula  advance  this 
goal  and  ensure  that  Marine  Corps  personnel  are  prepared  to  meet 
the  cyber  domain  demands  of  current  and  emerging  technologies. 

At  the  DON  IM/IT  Conference,  DON  CIO  Robert  J.  Carey  recog¬ 
nized  the  CTC  and  MCCES  staffs  for  their  quick  execution  of  train¬ 
ing  support  to  the  cyber  security  mission  requirement.  Mr.  Carey 
praised  TECOM  for  successfully  executing  high  tempo  training  re¬ 
quirements  while  managing  limited  resources. 

Commercial  certification  training  is  integral  to  the  DON  IA  Work¬ 
force  Improvement  Program  implementation.  Kudos  to  all  involved 
in  establishing  this  training  program  as  a  "best  practice."  CHIPS 


Maj.  Hammond  is  the  Director  of  the  Marine  Corps  Communication  Training  Cen¬ 
ters.  Mary  Purdy  provides  contract  support  to  the  DON  CIO  IT  Workforce  Team. 
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The  Going  Mobile  series  of  articles 
began  in  the  January  -  March 
2009  issue  of  CHIPS.  In  it  we 
discussed  "Enterprise  Mobility  2008/' 
the  report  released  by  the  Department 
of  the  Navy  Chief  Information  Officer 
that  describes  the  process  the  DON 
would  use  to  leverage  the  advantages 
that  commercially  available  wireless 
technologies  can  deliver. 

In  discussing  enterprise  mobility 
during  our  DON  Wireless  Working 
Group  session  at  the  DON  Information 
Management/Information  Technology 
(IM/IT)  Conference  in  February  held  in 
San  Diego,  we  decided  to  take  a  poll  to 
see  just  how  much  we  personally  use 
wireless  technologies.  Most  of  us  had 
never  thought  of  the  number  of  wireless 
devices  we  encounter  every  day. 

Using  the  list  at  right,  take  a  moment 
to  determine  your  "Wi-Q"  number.  Give 
yourself  a  point  for  every  wireless  device 
from  the  list  and  any  others  not  on  the  list 
that  you  use.  You  might  be  surprised. 

Please  e-mail  your  Wi-Q  number  and  the 
names  of  your  wireless  devices  not  on  the 
list  to  donwirelessteam.fct@navy.mil.  CHIPS 


Tom  Kidd  is  the  Department  of  the  Navy  director  of 
Strategic  Spectrum  and  Wireless  Policy.  In  addition 
to  "Going  Mobile,"he  also  authors  the  CHIPS 
continuing  series  "Can  You  Hear  Me  Now?"  which 
focuses  on  bringing  the  complex  and  often  esoteric 
issues  of  electromagnetic  spectrum  to  the  broader 
DON  community.  For  more  information  about  the 
DON  Wireless  Working  Group,  contact  the  DON 
Wireless  Team  at  donwirelessteam.fct@navy.mil. 


Wireless  Devices  You  Use 


□ 

GPS  Child  Locator 

□ 

Wireless  MP3  Player 

□ 

RFID  Smartcards 

□ 

Keyless  Remote  Entry 

□ 

Contactless  Payment  Systems 

□ 

In  Bumper  Back-up  Sensor 

□ 

Vehicle  Data  Recorder 

□ 

Wireless  3rd  Brake  Light 

□ 

Wireless  Printer 

□ 

Anything  WiMax 

□ 

Wireless  Shower  Radio 

□ 

Wireless  Recreational 

□ 

Wireless  Bathroom  Scale 

Vehicle  Levels 

□ 

Digital  Picture  Frame 

□ 

Atomic  Clock  Receiver 

□ 

Remote  Control  Power  Outlet 

□ 

Wireless  Workout  Monitor 

□ 

Wireless  Internet  Radio 

□ 

Wireless  Video  Glasses 

□ 

WiFi,  Other 

□ 

Radar  Speed  Gun 

□ 

Wireless  Tire  Pressure  Sensor 

□ 

Wireless  Tape  Measure 

□ 

Garage  Door  Opener 

□ 

Motion  Sensor  Alarm 

□ 

Wireless  Motion 

□ 

Wireless  BBQ  Thermometer 

Hunting  Decoys 

□ 

Wireless  Stock  Market 

□ 

Wireless  Remote 

Reporter 

Trolling  Motor 

□ 

Wireless  Doorbell 

□ 

Family  Radio  Service  Radio 

□ 

Wireless  Driveway  Alarm 

□ 

Citizen  Band  Radio 

□ 

Wireless  Backup  Camera 

□ 

RFID  Credit  Cards 

□ 

Wireless  Network  Router 

□ 

Wireless  PDA  Keyboard 

□ 

Wireless  Headphones 

□ 

Anything  Bluetooth 

□ 

Wireless  USB  Network 

□ 

Wireless  Cell  Phone  Headset 

Adapter 

□ 

RFID  Key  Fob 

□ 

Anything  ZigBee 

□ 

Wireless  Security  Camera 

□ 

Television 

□ 

Wireless  Weather  Station 

□ 

AM/FM/HD/Satellite  radio 

□ 

Wireless  Light  Switch 

□ 

Wireless  Game  Controllers 

□ 

Wireless  Thermometer 

□ 

Wireless  Speakers 

□ 

Golf  Range  Finder 

□ 

Wireless  VoIP  Phone 

□ 

GPS  Navigation  System 

□ 

Cordless  Phone 

□ 

Automatic  Vehicle  Location 

□ 

Wireless  Music  System 

□ 

Pet  Identification  Chip 

□ 

Wireless  Internet  Video 

□ 

Motion  Sensor  Lighting 

Camera 

□ 

Electronic  Dog  Collar 

□ 

TV  Remote  Control 

□ 

Wireless  Dog  Fence 

□ 

Wireless  Notebook  Computer 

□ 

Marine  Radio 

□ 

Wireless  Gaming  Receiver 

□ 

NOAA  Radio 

□ 

Wireless  Computer  Mouse 

□ 

Radio  Frequency  Security  Tag 

□ 

Wireless  Computer  Keyboard 

□ 

Cell  Phone  Signal  Booster 

□ 

Wireless  Microphone 

□ 

Cell  Phone 

□ 

Wireless  Guitar  Adapter 

□ 

Baby  Monitor 

□ 

Amateur  Radio  (Ham) 

□ 

Walkie-Talkie 

□ 

Personal  Emergency 

□ 

Radio  Controlled  Airplane 

Locator  Beacon 

□ 

Hands  Free  Cellular  Device 

You  Scored... 

0-30:  You  probably  own  a  cassette  deck  \  31-40:  You  probably  have  a  Facebook  page 
4 1  -60:  Your  spouse  thinks  you  need  therapy  \  6 1 -80+:  You're  a  Super  Geek  and  proud  of  it!! 
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Information  Technology  Training  on  NKO 


By  Chris  Kelsall 

In  March  2009,  the  Naval  Education 
and  Training  Command  completed 
changes  to  the  Navy  e-Learning  site 
to  provide  Department  of  the  Navy 
Information  Technology  Management 
Series  (2210)  personnel  the  ability  to 
identify  and  participate  in  online  training 
supporting  their  occupations  and  associ¬ 
ated  competencies. 

Although  developed  for  the  IT  Special¬ 
ist  2210  community,  learning  also  sup¬ 
ports  government  civilians  and  military 
personnel  desiring  additional  training  in 
IT  areas  ranging  from  systems  administra¬ 
tion  to  enterprise  architecture.  The  site 
also  provides  access  to  professional  de¬ 
velopment  courses  that  support  leader¬ 
ship  and  interpersonal  skills. 

To  learn  more  about  the  training  avail¬ 
able  and  to  view  occupational  groups, 
competency  and  course  mapping,  access 
Navy  e-Learning  via  Navy  Knowledge  On¬ 
line  (https://www.nko.navy.mil)  and  click 
on  the  Printable  Listing  link  under  the 
Content  tab  on  the  left  side  of  the  page, 
then  scroll  down  and  click  on  the  DON  IT 
2210  Competencies  Matrix  Spreadsheet. 

The  spreadsheet  provides  a  means  to 
link  to  course  descriptions  based  on  IT 
2210  parenthetical  titles  (2210  IT  Job  Se¬ 
ries  Matrix)  and  Competencies  (SkillSoft 
Learning  Asset  Map). 

Specific  directions  for  accessing,  enroll¬ 
ing  and  completing  courses  are  found 
under  the  course  access  instructions 
page  in  the  same  matrix.  Note  that  only 
government  employees  can  access  these 
pages. 

The  development  of  DON  IT  and  net¬ 
work  training  is  governed  by  federal  law, 
Defense  Department  and  DON  doctrine 
and  policy,  and  service-specific  policy 
implementing  higher  level  direction. 

Today's  processes  have  resulted  in  what 
some  have  called  "silos  of  excellence" 
where  acquisition  programs  determine 
requirements  for  their  network,  system  or 
application,  and  the  formal  schoolhouse 
training  requirements  are  based  upon  the 
capabilities  of  deployed  technology. 

To  ensure  that  the  abilities  of  the  DON 
IT  workforce  progress  to  support  the  net¬ 
work  environment  of  the  future,  training 


requirements  determination,  develop¬ 
ment  and  delivery  must  be  managed  at 
the  enterprise  level. 

Additionally,  how  the  DON  IT  workforce 
accomplishes  its  tasks  and  how  the  ser¬ 
vices,  coalition  partners  and  non-federal 
agencies  do  business  is  changing.  The 
future  is  filled  with  new  means  of  collabo¬ 
ration,  such  as  wikis,  collaborative  Web 
sites;  mashups,  which  combine  and  in¬ 
tegrate  data  from  multiple  sources;  pod¬ 
casts,  which  provide  digital  media  files 
distributed  over  the  Internet;  and  social 
networking,  which  was  popularized  by 
MySpace  and  Facebook,  and  is  now  being 
used  within  the  Defense  Department  and 
intelligence  community  to  provide  a  col¬ 
laborative  forum  to  share  information, 
allow  open  networking  and  provide  a  re¬ 
pository  of  knowledge. 

Today's  IT  training  consists  of  foun¬ 
dational  courses,  required  information 
assurance  training  and  certification,  fac¬ 
tory-delivered  training  and  formalized 
training  programs.  The  ever-changing 
roles  of  government  civilians,  the  infusion 
of  new  technologies  and  the  evolving 
cyber  realm  require  DON  personnel  to 
have  the  ability  to  rapidly  access  educa¬ 
tional  opportunities. 

The  deployment  of  this  training  is  one 
of  the  steps  the  DON  Chief  Information 
Officer  is  taking  with  Navy,  Marine  Corps 
and  private  sector  partners  to  provide  the 
DON  IT  workforce  with  opportunities  for 
personal  development. 

SkillSoft  offers  a  wide  variety  of  online 
learning  designed  to  meet  the  training 
needs  of  Navy  personnel.  This  includes 
more  than  3,000  self-paced  courses  cov¬ 
ering  topics  such  as  business  professional, 
IT  desktop  and  other  IT  professional  skills. 

These  courses  feature  strong  visual  de¬ 
sign,  a  focus  on  instructional  objectives  at 
the  application  and  analysis  levels;  learner 
interactivity;  reinforcement  through  role 
playing  and  case  studies  and  the  transfer 
of  learning  into  practice  through  online 
job  aids;  follow-on  activities;  and  quick 
reference  guides. 

A  testament  to  the  quality  of  SkillSoft 
content  is  the  recognition  these  courses 
have  achieved  from  several  accredited 


colleges  as  well  as  professional  certifica¬ 
tion  programs. 

SkillSoft  courses  have  been  approved 
to  offer  continuing  professional  educa¬ 
tion  credit  by  programs  such  as  Project 
Management  Institute's  Project  Manage¬ 
ment  Professional  (PMP)  certification,  the 
National  Association  of  State  Boards  of 
Accountancy  and  the  Human  Resource 
(HR)  Certification  Institute. 

In  addition,  SkillSoft  offers  more  than 
1,000  courses  and  60  preparatory  exams 
designed  to  help  prepare  an  individual 
for  the  more  than  100  IT  certifications 
that  SkillSoft  content  supports  today. 

The  DON  CIO  applauds  the  efforts  of 
the  personnel  from  the  Naval  Education 
and  Training  Command  and  SkillSoft  who 
made  this  extensive  training  possible. 

Enrollment  and  completion  of  courses 
identified  through  this  effort,  while  tar¬ 
geted  at  the  IT  2210  community,  are  open 
to  all  DON  government  civilian  and  mili¬ 
tary  personnel. 

Comments  and  recommendations  are 
welcomed  and  appreciated.  Comments 
may  be  submitted  via  the  DON  CIO 
Web  site  by  selecting  the  IT  Workforce 
Topic  area  at  www.doncio.navy.mil/ 
AskAnExpert.aspx.  CHIPS 


Access  Navy  e-Learning  via 
Navy  Knowledge  Online: 
https://www.nko.navy.mil 


Chris  Kelsall  is  the  DON  IT  Workforce  team  lead. 
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DON  IM/IT  Conference,  Once  Again  a  Huge  Success 

Conference  provides  opportunities  for  learning  and  networking  with  colleagues 


By  Holly  Quick 

With  more  than  900  people  in  at¬ 
tendance,  the  Department  of  the 
Navy  (DON)  Information  Management/ 
Information  Technology  (IM/IT)  Confer¬ 
ence  had  something  to  offer  everyone, 
from  the  program  manager  with  ques¬ 
tions  about  naval  architecture  to  the 
contract  specialist  buying  software.  The 
conference  offered  a  venue  to  share  in¬ 
formation  about  the  latest  DON  IM/IT  ini¬ 
tiatives,  policy  and  guidance,  from  senior 
leadership  level,  to  the  project  lead,  to 
the  average  IT  user. 

Hosted  by  the  DON  Chief  Information 
Officer,  the  conference  was  held  Feb.  10- 
13,  2009,  at  the  San  Diego  Convention 
Center.  Topics  were  chosen  based  on 
feedback  received  from  attendees  of  past 
DON  IM/IT  Conferences. 

Subject  matter  experts  from  the  DON 
CIO  led  43  informative  sessions,  which 
fell  under  12  requested  topics,  including: 
DON  Application  and  Database  Manage¬ 
ment  System  (DADMS)  and  DoD  IT  Port¬ 
folio  Repository  (DITPR)-DON;  privacy; 
enterprise  architecture;  Enterprise  Soft¬ 
ware  Initiative;  DON  IT  Umbrella  Program 
of  contracts;  IM/IT  workforce;  Joint  Infor¬ 
mation  Environment;  knowledge  man¬ 
agement;  and  spectrum/wireless  and 
telecommunications. 

It  would  be  impossible  to  describe  all 
the  conference  highlights,  but  one  of  the 
most  popular  sessions  featured  a  town 
hall  meeting  with  DON  CIO  Robert  J. 
Carey. 

Because  the  DON  CIO  is  the  Communi¬ 
ty  Leader  for  the  DON  IT  workforce,  there 
were  many  opportunities  for  DON  IT  per¬ 
sonnel  to  engage  with  DON  CIO  IT  work¬ 
force  team  members.  In  one  session,  Chris 
Kelsall  and  Jennifer  Harper  led  a  spirited 
discussion  with  lively  participation  from 
the  audience  on  current  and  future  DON 
IT  workforce  efforts. 

Kelsall  summarized  the  challenges  that 
confront  DON  IM/IT  personnel  and  de¬ 
scribed  how  the  DON  CIO  is  taking  reme¬ 
dial  action.  The  challenges  include: 

•  Developing  a  fighting  strategy  for  all 
areas  of  cyber  and  IT; 

•  The  varying  call  of  public  service  from 


generation  to  generation  and  from  per¬ 
son  to  person; 

•  Public  law  placing  significant  require¬ 
ments  on  federal  IT  employees; 

•  Maintaining  and  operating  state-of- 
the-art  and  legacy  systems  concurrently; 

•  Training  and  educating  the  DON  IT 
workforce  to  prepare  for  the  "Pearl  Har¬ 
bors"  of  cyber; 

•  Meeting  the  challenge  of  helping 
to  ensure  that  a  sufficient  talent  pool  is 
available  for  DON  IT  work;  and 

•  Addressing  the  challenges  of  ap¬ 
pealing  to  a  diverse  multigenerational 
workforce. 

The  DON  IT  Community  Town  Hall  fea¬ 
tured  guest  speaker  and  former  NASA  as¬ 
tronaut,  Dr.  Sally  Ride,  the  first  American 
woman  to  orbit  the  Earth. 

Mr.  Carey  and  Dr.  Ride  spoke  to  a 
packed  house,  including  San  Diego  area 
students.  The  students  were  symbolic  of 
the  discussion  which  centered  on  encour¬ 
aging  students  to  pursue  degrees  in  math 
and  science  and  promoting  multicultural 
diversity  in  the  Naval  workforce  by  re¬ 
cruiting  talented  women  and  individuals 
from  diverse  cultural  backgrounds  into 
government  service. 

Mr.  Carey  and  Dr.  Ride  talked  about  the 
importance  of  nurturing  student  interest 
in  the  sciences  at  a  young  age,  especially 
girls  and  minorities. 

According  to  Ride,  while  both  girls  and 
boys  exhibit  about  the  same  amount  of 
interest  in  science  at  a  young  age,  interest 
for  girls  and  minority  students  diminishes 
over  time.  The  loss  of  interest  is  not  due 
to  poor  grades  or  lack  of  ability,  said  Ride. 
The  reasons  are  societal:  cultural  images 
of  scientists  and  how  they  should  look 
and  act,  and  students'  fear  of  not  being 
able  to  succeed  in  difficult  career  fields. 

Dr.  Ride  said  there  are  many  ways  to 
reverse  this  trend,  including  mentoring 
students  at  a  young  age  and  encouraging 
them  that  careers  in  the  sciences  are  chal¬ 
lenging,  rewarding  and  even  patriotic, 
citing  her  own  reasons  for  pursuing  a  de¬ 
gree  in  physics  at  Stanford  University  and 
choosing  to  enter  the  astronaut  program. 


"The  goal  of  the  DON  is  to  be  an  em¬ 
ployer  of  choice,"  Mr.  Carey  said.  "The 
DON  strives  to  offer  challenging  careers 
in  IM  and  IT  to  both  civilian  employees 
and  military  members." 

According  to  Carey,  the  DON  has  about 
11,000  IM/IT  workforce  members,  not 
including  contractors.  He  said  the  work¬ 
force  is  expected  to  grow  within  the  next 
five  years  due  to  the  implementation  of 
the  Next  Generation  Enterprise  Network. 
Open  and  continuous  recruitment  will 
be  needed  to  staff  positions  required  for 
NGEN  governance  and  security,  Carey 
explained. 

The  DON  CIO  is  working  closely  with 
human  resources  specialists  on  innova¬ 
tive  recruiting  plans  which  will  be  de¬ 
signed  to  attract  a  diverse  pool  of  ap¬ 
plicants.  Announcements  will  be  posted 
on  USAJobs  (www.usajobs.gov)  and  the 
DON'S  Civilian  Human  Resources  Web  site 
(https://www.donhr.navy.mil)  beginning 
summer  2009,  Carey  said. 

Mr.  Carey  also  discussed  some  work¬ 
force  documents  being  developed:  the 
DON  IT  Workforce  Strategic  Plan;  the  char¬ 
ter  establishing  an  Information  Assurance 
Workforce  Management  Oversight  and 
Compliance  Council;  Cyberspace  Work¬ 
force  Policy  and  Guidance;  and  Civilian  IT 
Career  Paths. 

The  IT  workforce  can  hear  from  and 
engage  with  Mr.  Carey  on  a  regular  basis 
through  his  podcasts  and  blogs  which  are 
published  on  the  DON  CIO  Web  site. 

When  an  audience  member  asked  Dr. 
Ride  what  advice  she  would  give  young 
students,  she  said,  "Reach  for  the  stars. 
You  can  be  anything  you  want  to  be." 

To  view  a  full  list  of  the  conference  pre¬ 
sentations  and  request  copies,  go  to  the 
DON  CIO  Web  site  at  www.doncio.navy. 
mil.  CHIPS 


Don't  miss  the  East  Coast  DON  IM/IT 
Conference,  May  11-14,  2009,  at  the  Vir¬ 
ginia  Beach  Convention  Center,  Virginia 
Beach,  Va.  The  conference  will  be  held  at 
the  same  time  and  location  as  the  Joint 
Warfighting  Conference  2009,  sponsored 
byAFCEA  International  and  the  U.S.  Naval 
Institute  in  coordination  with  U.S.  Joint 
Forces  Command. 

You  can  register  for  the  East  Coast  DON 
IM/IT  conference  by  going  to  the  DON  CIO 
Web  site:  www.doncio.navy.mil. 
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Recognising  Department  c 

Department  of  the  Navy  personnel  transforming  the  DC 


2009  DON  IM/IT  Award  Winners  Announced 


Three  individuals  and  five  project  teams  were  honored  at  the  DON 
Information  Management/Information  Technology  Conference  in  San 
Diego  for  their  outstanding  contributions  toward  transforming  the  Navy 
and  Marine  Corps  through  information  technology. 

The  following  individuals  and  teams  were  recognized  during  an 
awards  ceremony,  Feb.  11,  2009,  by  Robert  Carey,  DON  Chief  Informa¬ 
tion  Officer;  Jim  Craft,  Deputy  Director,  C4,  Headquarters  Marine  Corps; 
Kevin  Cooley,  director,  Information  Technology  and  Information  Resourc¬ 
es  Management,  N61;  and  Vice  Adm.  H.  Denby  Starling  II,  commander, 
Naval  Network  Warfare  Command. 

William  G.  Reynolds,  Naval  Education  and  Training  Professional  Devel¬ 
opment  and  Technology  Center  CIO/N6  director  Executive  Management 
Framework.  While  serving  as  NETPDTC  CIO/N6,  Reynolds  created  and 
implemented  an  Execution  Management  Framework  (EMF)  that  drove 
major  positive  cultural  change  in  a  Navy  IT  organization  of  300  employ¬ 
ees,  which  delivers  business  value  to  more  than  40,000  Sailors  annually. 

Through  his  leadership,  NETPDTC  N6  is  becoming  a  leading  entrepre¬ 
neurial  IT  organization.  Managers  now  work  to  define  goals,  manage  cus¬ 
tomer  expectations,  and  shape  increased  business  value  expectations. 
EMF’s  resounding  success  is  due  to  Reynolds’  risk  taking  and  challeng¬ 
ing  his  staff  to  understand  and  implement  transformational  change. 

Capt.  Roy  S.  Petty,  commanding  officer,  Navy  Cyber  Defense  Operations 
Command.  Capt.  Petty  is  a  recognized  subject  matter  expert  and  leader 
in  the  evolving  mission  area  of  computer  network  defense.  He  fosters  a 
command  environment  that  maximizes  the  ingenuity  and  productivity  of 
his  cyber  workforce. 

Under  his  leadership,  the  Navy  Cyber  Defense  Operations  Command 
has  attained  unprecedented  levels  of  success  and  set  a  new  standard 
of  excellence  for  all  Department  of  Defense  computer  network  defense 
service  providers. 


Lt.  Bobby  Carmickle,  combat  systems  officer  and  electronics  material 
officer,  USS  Freedom  (LCS  1).  While  serving  as  electronics  material 
officer  in  the  first  Littoral  Combat  Ship,  USS  Freedom,  Carmickle  dis¬ 
tinguished  himself  through  exceptional  performance  in  the  design  and 
implementation  of  a  new  and  unique  Littoral  Combat  Ship  Distance  Sup¬ 
port  architecture. 

With  a  core  crew  of  just  40  Sailors,  this  unique  warship  requires  a  radi¬ 
cal  new  approach  to  off-ship  support.  Lt.  Carmickle  brought  this  issue  to 
the  attention  of  his  chain  of  command  and  then  led  efforts  to  develop  the 
operational  and  technical  architectures  needed  to  provide  the  requisite 
reach-back  to  support  tactical  employment  of  USS  Freedom. 

Navy  Exchange  Service  Command  Payment  Card  Industry  Compliance 
Project  Team  for  exemplary  execution  of  measures  to  meet  the  PCI  Data 
Security  Standards  compliance  requirements.  The  success  of  this  project 
resulted  in  the  protection  of  customers’  personal  credit  card  information; 
preserved  the  security  and  integrity  of  NEXCOM’s  IT  systems,  networks 
and  critical  infrastructure  from  compromise;  and  protected  NEXCOM’s 
profits  and  the  associated  Navy  Morale,  Welfare  and  Recreation  (MWR) 
profit  distribution  by  avoiding  the  costs  associated  with  fees  and  penalties 
for  noncompliance. 

Headquarters  U.S.  Pacific  Command  J6  Portal  for  significant  achieve¬ 
ment  and  leadership  in  the  implementation  of  classified  and  unclassified 
portals  at  HQUSPACOM.  The  team  set  the  standard  for  information  dis¬ 
semination  and  collaboration  in  the  Asia  Pacific  region.  More  than  1,500 
users  PACOM-wide  have  enhanced  capabilities  in  the  portal  environment 
for  warfighting  and  humanitarian/disaster  relief  functions,  improving  deci¬ 
sion  making. 

As  a  result  of  the  team’s  efforts,  USPACOM  is  better  able  to  respond 
to  world  events  and  dynamically  collaborate  with  international  mission 
partners. 


and  Accreditation 
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DON  teams  and  individuals  of  all  ranks,  rates  and  grades  are  eligible  to  apply 
for  the  annual  DON  IM/IT  Awards.  Awards  are  presented  to  those  who  meet 
one  or  more  of  the  following  criteria:  superior  leadership  skills,  delivering  re¬ 
sults  that  ensure  the  organization  is  working  toward  common  solutions  that 
align  to  the  DON  IM/IT  strategic  vision;  innovative  use  of  IM/IT  to  reduce 
systems  and  applications;  innovative  use  of  IM/IT  to  significantly  improve  the 
efficiency  and  effectiveness  of  the  organization  in  delivering  its  mission  while 
not  duplicating  existing  projects,  systems  or  solutions;  sharing  and  managing 
information  and  knowledge  to  enable  effective  decision-making,  increase  the 
efficiency  and  improve  mission  effectiveness;  significant  contributions  that 
enable  information  assurance,  computer  network  defense,  critical  infrastruc¬ 
ture  protection  and  identity  management  improvements;  significant  contribu¬ 
tions  to  the  recruitment,  retention  and  training  of  the  IM/IT  workforce. 


For  more  information  about  the  DON  IM/IT  Awards,  go  to  the  DON  CIO  Web 
site  at  www.doncio.navy.mif^  ■' 
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if  the  Navy  Award.  Winners 

)A/  through  innovative  information  technology  projects 


U.S.  Marine  Corps  Information  Assurance  Workforce  Improvement  Plan, 

under  the  direction  of  Maj.  Jeffrey  L.  Hammond  and  Capt.  Russell  B. 
Cromley,  for  revolutionizing  the  way  the  Marine  Corps  trains  and  now 
commercially  certifies  its  information  technology  personnel. 

With  a  300  percent  increase  in  cyber  attacks  on  Department  of  De¬ 
fense  IT  infrastructure,  there  is  a  critical  need  for  knowledgeable  IT  per¬ 
sonnel.  The  leadership  and  focused  efforts  of  Maj.  Hammond  and  Capt. 
Cromley  ensure  that  the  Marine  Corps  is  prepared  to  meet  the  demands 
of  current  and  emerging  technologies  of  the  cyber  domain. 

Naval  Network  Warfare  Command  Led  Certification  and  Accreditation 
Lean  Six  Sigma  Project  for  work  that  resulted  in  the  successful  imple¬ 
mentation  of  improvements  in  the  Navy's  information  assurance  certifica¬ 
tion  and  accreditation  process. 

Using  Lean  Six  Sigma  techniques,  the  team  worked  with  representa¬ 
tives  from  across  the  Navy's  IT  community  to  overhaul  the  Navy's  pro¬ 
cess  for  managing  the  implementation  of  information  assurance  capabili¬ 
ties  and  services. 

The  new  process  that  the  team  developed  has  been  successful  in  re¬ 
ducing  the  time  it  takes  to  complete  certification  and  accreditation  activi¬ 
ties  while  improving  the  quality  and  visibility  of  accreditation  decisions. 

Navy-Marine  Corps  Mobilization  Processing  System  for  its  rapid  design, 
development  and  implementation  of  the  core  system  for  what  has  be¬ 
come  the  U.S.  Navy's  authoritative  Web-based  Individual  Augmentation 
tracking  system  in  support  of  the  global  war  on  terrorism. 

The  development  team,  comprised  of  representatives  from  several 
key  Navy  organizations  and  small  business  application  software  firms, 
used  commercial  development  tools  to  create  a  Web-enabled  personnel 
requirements  and  fulfillment  system  which  operates  across  DoD  secure 
and  non-secure  environments  using  role-based  permissions  to  allow  use 
by  commands  throughout  the  world.  CHIPS 


DON  Fed  100  Award  Winners  Announced 

Congratulations  to  the  DON'S  2009  Federal  100  award  winners.  The 
Federal  100  award  recognizes  individuals  in  government  and  industry 
who  made  significant  contributions  to  the  federal  information  technology 
community  in  2008.  The  awards  are  presented  by  the  1105  Government 
Information  Group  and  Federal  Computer  Week.  The  winners  were 
honored  at  a  gala  March  25.  The  award  winners  are  listed  below. 

Byron  Adams  -  Legal  Counsel  to  the  Department  of  the  Navy  Chief 
Information  Officer 

Rear  Adm.  Mike  Brown  -  Acting  Assistant  Secretary  for  Cybersecurity 
and  Communications  for  the  Department  of  Homeland  Security 

Joseph  Camacho  -  Program  Director,  U.S.  Joint  Forces  Command  Joint 
Knowledge  Development  and  Distribution  Capability 

Robert  J.  Carey  -  DON  CIO 

Richard  Etter  -  DON  CIO  Information  Assurance  and  Critical 
Infrastructure  Protection  Team  Lead 

Dan  Green  -  Data  Strategy  Technical  Process  Owner,  Space  and  Naval 
Warfare  Systems  Command 

Barb  Hoffman  -  DON  CIO  Director  of  Operations  and  Director  of 
Investment  and  Performance  Management 

Lt.  Col.  Richard  Leino  -  S-5  Engineering,  Marine  Corps  Network 
Operations  and  Security  Center 

Capt.  Roy  Petty  -  Commanding  Officer,  Navy  Cyber  Defense 
Operations  Command 


CHIPS 


Lt.  Bobby  Carmickle  with  Robert  J.  Carey. 


Capt.  Roy  S.  Petty 


Navy  Exchange  Service  Command  Payment  Card  Industry  Compliance  Project  Team 


DON  CIO  Rob  Carey  encourages  the  DON  IM/IT  workforce  to  read  for  professional  development.  His  recommendations  include: 

Wikinomics:  How  Mass  Collaboration  Changes  Everything  by  Don  Tapscott  and  Anthony  D.  Williams 

The  SPEED  of  Trust:  The  One  Thing  That  Changes  Everything  by  Stephen  M.R.  Covey 

Leadership  is  an  Art  by  Max  DePree 

The  17  Indisputable  Laws  of  Teamwork  by  John  C.  Maxwell 

Rule  Number  Two  by  Dr.  Heidi  Kraft  ,  .  i  a 
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CROSS  BANDING:  ENABLING  COMMUNICATIONS 
INTEROPERABILITY  AMONG  FIRST  RESPONflERS 


interoperable  communications  between  federal  first  re- 
I  sponders  and  non-federal  first  responders  is  a  vital  capability 
I  that  must  be  pursued  by  the  Department  of  the  Navy  (DON) 
I  because  Navy  and  Marine  Corps  installations  have  a  close,  co¬ 
operative  relationship  with  adjacent  federal,  state  and  local  first  re¬ 
sponders.  Ensuring  interoperable  communications  for  police,  fire, 
emergency  medical  services,  and  other  first  responder  services,  is  a 
challenging  endeavor  that  can  be  achieved  and  ultimately  betters 
the  posture  and  capabilities  of  the  DON. 

Interoperable  communications  for  federal,  state  and  local  first  re¬ 
sponders  provide  significant  benefits  in  crisis  management  opera¬ 
tions  where  immediate  communications  can  save  lives  and  prevent 
the  loss  of  property.  But  ensuring  interoperable  communications 
is  a  complex  process  that  involves  a  number  of  factors,  including 
communications  control  and  coordination  of  radio  frequencies. 

Coordination  of  federal  and  non-federal  radio  frequencies  used 
for  first  responders  is  not  exceedingly  difficult;  however,  there  can 
be  challenges  emplacing  necessary  agreements  and  determining 
technological  configurations  that  are  essential  to  interoperability. 

Preparation  is  the  key  to  successful  interoperability.  Interoper¬ 
ability  plans  and  agreements  should  be  preprogrammed,  and  the 
spectrum  (radio  frequencies)  required  to  support  these  operations 
should  be  identified  and  allocated  before  an  incident  requiring  in¬ 
teroperability  is  encountered. 

Ad  hoc  plans  and  solutions  are  more  likely  to  result  in  communi¬ 
cation  shortfalls  than  solutions  that  were  pre-planned  and  ready 
for  implementation. 

The  first  step  in  attaining  interoperability  is  understanding  how 
spectrum  is  allocated  and  may  be  shared  and  used  within  first  re¬ 
sponder  agencies.  U.S.  spectrum  governance  was  purposefully 
created  to  protect  federal  and  non-federal  spectrum  equities; 
however,  the  role  of  the  federal  agency  first  responder  in  domestic 
emergencies  has  increased  dramatically  over  the  past  few  decades. 

The  U.S.  radio  frequency  spectrum  is  allocated  among  federal 
and  non-federal  services,  and  use  is  governed  by  similar  yet  differ¬ 
ent  organizations.  The  use  of  federal  radio  frequencies  is  governed 
by  the  National  Telecommunications  and  Information  Administra¬ 
tion,  while  non-federal  spectrum  use  is  governed  by  the  Federal 
Communications  Commission. 

The  NTIA  and  FCC  both  recognize  and  support  the  use  of  spec¬ 
trum  for  interoperable  communications  between  federal  and  non- 
federal  first  responders. 

Federal  radio  frequency  users  include  the  departments  of  the 
Army,  Navy  and  Air  Force,  U.S.  Coast  Guard,  and  the  departments  of 
Justice  and  the  Interior.  Sharing  federal  radio  frequencies  between 


federal  first  responders  requires  only  agency  to  agency  coordina¬ 
tion.  Agencies  are  not  required  to  obtain  frequency  assignments  to 
share  the  system  provided  that  there  is  a  federal  agency  that  has 
obtained  a  federal  radio  frequency  assignment,  and  that  agency 
consents  to  other  federal  agency  use. 

Federal  agencies  can  obtain  frequency  assignments  in  frequency 
bands  allocated  exclusively  for  non-federal  use;  however,  this  action 
requires  NTIA  and  FCC  approval  and  generally  requires  significant 
coordination  time  to  ensure  that  the  NTIA  and  the  FCC  can  support 
a  given  frequency  assignment.  Information  on  establishing  this  type 
of  interoperability  can  be  found  in  paragraph  8.2.48  of  NTI  A's  Manu¬ 
al  of  Regulations  and  Procedures  for  Federal  Radio  Frequency  Man¬ 
agement.  Resulting  frequency  assignments  are  granted  with  the 
provision  that  no  harmful  interference  will  be  caused  to  the  service 
rendered  by  non-federal  stations,  present  or  future. 

State,  local  and  tribal  governments,  as  well  as  commercial  and 
private  radio  users,  are  examples  of  non-federal  users.  Similar  to 
federal  agency  use  of  non-federal  frequency  assignments,  non-fed¬ 
eral  frequency  assignments  may  be  authorized  in  a  frequency  band 
solely  allocated  for  federal  use.  And,  similar  to  federal  organizations 
obtaining  non-federal  frequency  assignments,  the  assignments  re¬ 
quire  FCC  and  NTIA  coordination.  Resulting  assignments  are  provi¬ 
sioned  so  that  no  harmful  interference  will  be  caused  to  the  service 
rendered  by  federal  stations,  present  or  future. 

Akin  to  the  coordination  time  for  federal  frequency  assignments 
in  non-federal  frequency  allocations,  non-federal  assignments  in 
federal  frequency  allocations  will  often  require  considerable  coor¬ 
dination  and  time. 

A  common  misconception  concerning  interoperable  communi¬ 
cations  is  that  all  parties  must  operate  on  the  same  frequency.  But 
there  are  radio  systems  and  equipment  that  can  "cross  band"  a  fre¬ 
quency  from  one  frequency  band  to  a  frequency  from  a  different 
band.  Cross  banding  is  transparent  to  users.  Equipment  of  this  type 
provides  many  advantages  and  eliminates  the  associated  challenges 
of  coordinating,  acquiring  and  maintaining  "out  of  band"  frequency 
assignments. 

Cross  band  capabilities  allow  federal  users  to  operate  on  frequen¬ 
cies  managed  by  the  NTIA,  and  non-federal  users  to  operate  on  fre¬ 
quencies  managed  by  the  FCC  while  providing  interoperable  commu¬ 
nications  without  the  use  of  a  single  frequency.  As  such,  cross  band 
capabilities  minimize  the  complexity  of  frequency  coordination  and 
use  while  providing  fully  interoperable  communications.  CHIPS 

Tom  Kidd  is  the  DON  director  of  Strategic  Spectrum  and  Wireless  Policy.  In  addition  to 
"Can  You  Hear  Me  Now?"-  he  also  authors  the  recurring  CHIPS  series  "Going  Mobile." 
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Knowledge  Management  on  a  Joint  Task  Force 

KM  can  be  successful  without  expensive  technology  and  with  simple  changes 


By  Cmdr.  Diane  Boettcher 

During  Operation  Torch,  the 
World  War  II  invasion  of  North 
Africa,  Gen.  George  Patton  di¬ 
rected  operations  about  20  hours  each 
day.  This  means  that  if  he  made  a  decision 
every  other  minute,  he  was  making  600 
decisions  a  day.  We  can  estimate  that  as 
60  seconds  to  be  briefed,  30  seconds  to 
discuss  options  with  his  staff,  and  then  30 
seconds  to  issue  orders. 

Knowing  that  his  primary  source  for  in¬ 
formation  was  the  telephone,  along  with 
letters  and  a  radio  network,  we  can  as¬ 
sume  that  current  commanders  have  ac¬ 
cess  to  exponentially  more  information. 
However,  they  do  not  have  access  to  more 
decision-making  time.  You  could  say  they 
are  still  limited  to  600  decisions  a  day. 

As  early  as  2002,  Gartner  Research  re¬ 
ported  that  90  percent  of  business  man¬ 
agers  believe  they  suffered  from  infor¬ 
mation  overload.  Information  overload 
can  cause  physical  stress,  as  well  as  poor 
decisions,  due  to  overconfidence  in  in¬ 
formation  that  is  actually  incomplete  or 
inaccurate. 

U.S.  military  leaders  share  the  same 
concerns  about  information  overload  that 
business  managers  do.  Following  a  recent 
exercise,  an  intelligence  officer  told  me,  "I 
still  don't  know  what  knowledge  man¬ 
agement  is,  but  I  know  we  needed  some. 
I  had  no  time  for  analysis,  only  to  check 
my  e-mail  and  develop  slides  for  the  next 
briefing." 

KM  as  Information  Sharing 

Knowledge  management  is  a  discipline 
that  requires  organizations  to  be  deliber¬ 
ate  about  how  they  process  knowledge 
that  will  be  shared  with  the  people  who 
need  to  know  it  so  they  can  make  better 
decisions  faster. 

While  we  don't  manage  knowledge, 
we  can  manage  the  people,  processes 
and  technology  that  handle  knowledge 
to  maximize  sharing.  Lately,  the  phrase 
"information  sharing"  has  gained  promi¬ 
nence  in  the  lexicon  and  has  the  added 
advantage  of  being  quickly  and  easily 
understood. 

KM  Staffing 

Most  military  organizations  are  find¬ 


ing  that  their  chief  knowledge  officer 
(or  knowledge  management  officer)  can 
achieve  better  results  when  reporting  to 
the  chief  of  staff  or  deputy  commander 
vice  reporting  to  a  division  or  department 
head. 

The  KMO/CKO  should  have  sufficient 
rank  to  avoid  being  redirected  to  other 
efforts.  KMOs  that  are  treated  as  technical 
support  will  spend  their  days  solving  the 
command's  IT  problems  rather  than  iden¬ 
tifying  and  resolving  knowledge  flow 
difficulties. 

KMOs  should  also  have  appropriate 
background  and  training.  Too  often,  this 
position  is  given  to  someone  who  lacks  a 
fundamental  understanding  of  KM  princi¬ 
ples,  who  becomes  enamored  with  tools, 
rather  than  focusing  on  the  people  and 
process  aspects  of  the  organization. 

Trained  KMOs  should  be  placed  in  all 
key  boards,  centers  and  cells,  but  at  a 
minimum  in  the  operations,  intelligence, 
logistics,  administrative  and  training 
groups.  These  KMOs  will  report  to  the 
KMO/CKO  and  have  other  duties,  but  they 
still  must  be  trained  to  recognize  key  in¬ 
formation  and  how  to  share  it. 

The  CKO  will  work  with  the  J6  (com¬ 
mand,  control,  communications  and  com¬ 
puter  systems)  to  ensure  that  the  tools 
provided  are  appropriate  for  the  KM  plan. 
The  J7  (plans  and  force  development)  will 
help  train  personnel  on  the  processes 
and  tools,  while  the  J1  (manpower  and 
personnel)  should  identify  and  recruit  the 
people  needed  to  execute  the  organiza¬ 
tion's  mission. 

It  is  important  to  emphasize  that  KM 
can  be  accomplished  without  technol¬ 
ogy  and  begin  with  simple  changes.  For 
example,  early  KM  practitioners  recom¬ 
mended  locating  personnel,  who  needed 
to  work  together,  in  the  same  physical 
proximity.  This  seems  like  common  sense 
today,  but  it  wasn't  that  long  ago  when  all 
the  executives  of  an  organization  were  on 
a  single  floor,  middle  managers  on  anoth¬ 
er,  and  line  personnel  somewhere  else. 

Placing  people  next  to  each  other  in¬ 
creases  the  potential  of  random,  unan¬ 
ticipated  knowledge  sharing  that  can 
improve  an  organization's  efficiency  and 
effectiveness. 


Other  KM  practices  seek  to  take  advan¬ 
tage  of  the  systems  already  in  place.  Most 
e-mail  applications,  for  example,  have 
a  variety  of  features  that  can  improve 
knowledge  sharing  without  an  additional 
IT  investment. 

KM  on  a  Joint  Task  Force  Staff 

Knowledge  management  on  a  joint 
task  force  staff  focuses  primarily  on  the 
creation  and  flow  of  knowledge  within 
the  staff  and  at  key  interfaces  with  higher 
and  lower  headquarters. 

Many  processes  and  tools  exist  to  help 
facilitate  this  flow  of  knowledge.  Among 
them  are  the  Commander's  Critical  Infor¬ 
mation  Requirements  (CCIRs);  the  Battle 
Rhythm;  a  significant  events  (SIGACT) 
log;  and  even  a  phone  book  or  contact 
list.  Other  processes  that  need  to  be  sup¬ 
ported  are  building  briefs,  capturing  les¬ 
sons  learned,  handling  requests  for  infor¬ 
mation  and  tracking  actions. 

The  KM  plan  must  begin  with  an  under¬ 
standing  of  the  staff  structure  and  their 
roles  and  responsibilities.  Just  as  one 
would  first  survey  the  technical  architec¬ 
ture  of  a  network  before  recommending 
improvements  or  upgrades,  the  KMO 
must  survey  the  cultural  architecture  of 
the  knowledge  network  of  the  staff. 

Who  do  they  share  information  with? 
Where  do  they  seek  information?  How  do 
these  exchanges  occur?  Where  and  when 
do  they  take  place?  This  information  can 
be  used  to  build  an  "as-is"  information  ex¬ 
change  matrix. 

The  "to-be"  or  recommended  informa¬ 
tion  exchange  matrix  can  then  be  devel¬ 
oped.  This  matrix  should  outline  what 
information  should  be  exchanged,  how 
and  when. 

Keep  in  mind  when  developing  this 
matrix  the  cultural  implications  of  chang¬ 
es  to  the  existing  information  exchange 
mechanisms.  For  example,  a  staff  that  is 
accustomed  to  using  e-mail  as  their  pri¬ 
mary  form  of  communication  should  re¬ 
ceive  training  and  encouragement  if  they 
are  being  asked  to  move  such  communi¬ 
cations  to  a  portal. 

The  Battle  Rhythm  is  the  information 
exchange  matrix  described  over  time. 
This  rhythm  will  be  a  key  element  of  the 
KM  plan  and  typically  hinges  on  a  specific 
daily  action. 

The  daily  update  brief  that  the  com¬ 
mander  must  provide  to  higher  head¬ 
quarters  or  a  tactical  decision  to  proceed 
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might  be  the  precipitating  event  around 
which  the  battle  rhythm  is  built. 

The  rhythm  is  not  carved  in  stone,  but 
should  be  modified  to  meet  changing  re¬ 
quirements.  However,  consider  the  rami¬ 
fications  to  lower  headquarters  before 
changing  any  incoming  information  ex¬ 
change  requirement.  Those  at  the  tactical 
edge  may  be  at  the  far  end  of  a  long  whip. 
Minor  battle  rhythm  changes  at  the  JTF 
may  cause  major  shifts  for  tactical  users, 
so  be  sensitive  to  user  needs. 

A  significant  events  log  should  be 
maintained  where  everyone  in  the  JTF 
can  access  the  information.  Embedding 
the  SIGACT  log  into  the  processes  of  the 
JTF  can  ensure  that  it  will  be  part  of  the 
process  rather  than  in  addition  to  it. 

Requiring  extra  work  of  the  staff  is  not 
an  efficient  use  of  their  time  and  is  un¬ 
likely  to  be  sustained  over  time.  For  ex¬ 
ample,  a  call  for  CAS  (close  air  support) 
might  require  a  SIGACT  number  before 
being  accepted.  This  type  of  process  sup¬ 
port  enforces  best  practices  over  time  and 
through  staff  turnover.  Ideally,  the  infor¬ 
mation  would  also  be  available  for  histori¬ 
cal  analysis  and  data  mining. 

In  the  early  days  of  any  JTF  effort,  a 
phone  book  is  essential  for  communica¬ 
tions.  If  cell  phones  are  distributed,  they 
must  be  tracked.  The  Army  often  uses  a 
large,  printed  organizational  chart  that 
includes  names  and  contact  information. 

Known  as  a  "horse  blanket,"  this  chart 
provides  a  clear  view  of  the  organization 
and  whom  to  contact  for  various  issues. 
While  some  think  that  print  documents 
are  an  anachronism  in  the  IT  age,  others 
have  seen  an  immediate  improvement  in 
shared  understanding  among  staff  mem¬ 
bers  using  such  basic  documents. 

Of  course,  having  a  horse  blanket 
doesn't  preclude  the  use  of  an  online  di¬ 
rectory.  External  points  of  contact,  par¬ 
ticularly  with  nongovernmental  organi¬ 
zations  and  coalition  partners,  should 
be  included  in  any  phone  book.  If  these 
basic  tools  can  be  updated  and  anno¬ 
tated  with  critical  information  by  staff 
members,  the  information  is  more  likely 
to  be  accurate  and  more  valuable  to  users. 

Future  of  KM 

Knowledge  management  at  its  heart 
will  always  be  about  people  and  pro¬ 
cesses.  However,  tools  can  help  transform 
the  way  people  institute  processes. 

Young  adults  joining  the  military  today 


Cmdr.  Diane  Boettcher  is  the  commanding 
officer  of  SPAWAR  Reserve  Unit  303  located  in 
Mayport,  Fla.  In  2007,  she  was  mobilized  to  the 
Standing  Joint  Force  Fleadquarters  where  she 
served  as  knowledge  management  officer  and 
deployed  to  Afghanistan. 


are  changing  the  way  information  is 
viewed  and  shared.  These  "digital  na¬ 
tives"  are  bringing  with  them  an  ease  and 
familiarity  with  technology  that  is  unri¬ 
valed.  They  eagerly  network  and  collabo¬ 
rate  often  because  they  understand  the 
innovation  and  creativity  that  can  occur 
when  users  collaborate  on  a  problem. 

Digital  natives,  also  called  Generation  Y 
or  Millennial,  grew  up  using  digital  tech¬ 
nology  such  as  cell  phones,  home  com¬ 
puters  and  the  Internet.  They  have  Face- 
book  and  MySpace  accounts,  iPods,  and 
they  instant  message.  They  can  text  on 
their  cell  phones  faster  than  most  of  their 
parents  can  type  on  a  full-size  keyboard. 

Millennial  collaborate  with  gusto  so 
it  is  important  to  leverage  their  abilities 
when  designing  a  KM  plan.  Their  enthu¬ 
siasm  for  networking  can  have  a  positive 
effect  on  those  in  your  organization  who 
may  not  be  as  proficient  or  are  skeptical 
about  sharing  information. 

Since  knowledge  management  focuses 
on  people,  the  organization  and  training 
for  KM  personnel  will  be  critical  to  the 
proper  execution  of  a  KM  plan.  As  new 
people  join  the  Defense  Department  and 
new  technology  becomes  available,  we 
will  need  to  adapt  and  adjust  KM  tools 
and  processes  to  enable  them  to  capture 
and  share  knowledge. 

Knowledge  management  can  be  the 
best  facilitator  for  the  efficient  operation 
of  a  joint  staff  and  for  helping  the  com¬ 
mander  make  the  best  decisions  possible 
in  the  challenging  environments  war¬ 
fighters  operate  in  today.  CHIPS 

For  more  information,  contact  SPAWAR  public  af¬ 
fairs  at  (619) 524-3432. 


DON  CIO  Memo  Articulates 
DON  EA  Near-Term  Strategy 

The  Department  of  the  Navy  Chief  Informa¬ 
tion  Officer  signed  the  DON  Enterprise  Archi¬ 
tecture  (EA)  Strategy  Memo  in  February,  a  first 
in  a  series  of  memos,  to  articulate  the  near- 
term  strategy  for  continued  development  of  the 
DON  EA. 

The  memo  establishes  direction  to  ensure 
alignment  of  all  DON,  Navy  and  Marine  Corps 
programs  and  initiatives  to  the  Joint  Staff  devel¬ 
oped  Joint  Capabilities  Areas. 

The  DON  EA  will  be  developed  incrementally, 
with  close  coordination  between  the  DON  CIO, 
Assistant  Secretary  of  the  Navy  for  Research, 
Development  and  Acquisition  (ASN(RDA)) 
Chief  Systems  Engineer  (CHSENG),  DON 
Deputy  CIO  (Navy),  DON  Deputy  CIO  (Marine 
Corps)  and  the  DON  Chief  Management  Offi¬ 
cer  (CMO). 

Critical  tasks  identified  in  the  strategy  memo 
include  development  of: 

/  A  DON  EA  governance  process  for  compli¬ 
ance,  and  establishing  and  enforcing  DON  EA 
standards  and  policies; 

/  An  abstract  layer  of  the  DON  EA  to  provide 
senior  leaders  insight  into  the  contents  of  the 
EA; 

/  A  DON  EA  management  process  to  ensure 
EA  efforts  align  to  strategic  goals  and  objec¬ 
tives  of  the  Department;  and 
/  A  DON  EA  repository,  developed  concur¬ 
rently  with  a  policy  to  mandate  its  use,  to  sup¬ 
port  the  discovery  and  sharing  of  authoritative 
EA  products  and  information. 

The  DON  EA  Strategy  Memo  also  identi¬ 
fies  the  value  of  ensuring  that  the  DON  EA 
be  focused  on  supporting  the  major  decision 
processes  of  the  DoD  and  DON,  such  as  the 
Defense  Acquisition  Systems,  Planning,  Pro¬ 
gramming,  Budgeting  and  Execution,  and  Joint 
Capability  Integration  and  Development  Sys¬ 
tems  (JCIDS)  processes. 

The  DON  EA  Strategy  Memo  is  applicable 
to  all  in-process  and  future  DON  architecture 
development  efforts  that  provide  or  maintain 
DON,  Navy  and  Marine  Corps  capabilities,  in¬ 
cluding  associated  standards  developed  under 
or  incident  to  programs,  projects,  capabilities, 
systems  and  initiatives.  CHIPS 


To  download  the  DON  EA  Strategy  Memo,  go  to 
the  DON  CIO  Web  site  at  www.doncio.navy.mil 
and  search  under  the  Policy  tab. 
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SPAWAR  Systems  Center  Pacific  Scientists 
Distinguished  for  Career  Accomplishments 


SURFOR  Debuts  SWO  e-Mentor  Program 

By  Naval  Surface  Forces  Public  Affairs 


By  SPAWAR  Public  Affairs 

Two  Space  and  Naval  Warfare  (SPAWAR)  Systems  Center  Pacific  employees  were  recently  selected 
as  distinguished  Scientists/Technologists  (ST).  These  are  senior  flag-level  positions  with  a  focus  on 
science  and  technology,  similar  to  the  Senior  Executive  Service.  Dr.  Roy  Axford  and  Dr.  Adi  Bulsara 
are  now  two  of  only  41  STs  throughout  the  Navy  and  are  SSC  Pacific's  first  appointments  in  20  years. 

Approval  for  an  ST  position  involves  a  rigorous,  competitive  nationwide  selection  process.  Appointees 
must  demonstrate  depth  in  research  and  technical  accomplishments  in  a  particular  field  of  study  that  is  sup¬ 
ported  by  publications,  patents  and  national  or  international  recognition. 

"Adi  and  Roy  are  truly  deserving  of  this  national  recognition,"  said  Carmela  Keeney,  SSC  Pacific's  techni¬ 
cal  director.  “This  is  a  tremendous  career  milestone  and  is  a  reflection  of  the  superb  research  and  develop¬ 
ment  they  have  done  over  many  years.  It  is  also  a  significant  milestone  for  the  center.  We  are  so  happy  to 
have  two  STs  at  SSC  Pacific." 

Bulsara  is  currently  the  principal  mentor  of  the  eleven-member  Advanced  Dynamics  Research  group, 
which  is  globally  recognized  as  one  of  the  premier  groups  for  research  in  nonlinear  dynamics  and,  possibly, 
the  leading  group  on  practical  applications.  This  effort,  featured  on  the  cover  of  Physics  Today  in  1996,  led 
to  his  being  awarded  SSC  Pacific's  highest  recognition,  the  Lauritsen-Bennett  award.  This  work  has  led  to  a 
compact,  cheap  and  sensitive  room  temperature  magnetometer  that  the  Marine  Corps  is  considering  as  an 
intrusion  sensor. 

"We've  had  seriously  dark  periods  of  almost  zero  funding,  but  our  management  realized  that  we  had  a 
good  thing  going  and  showed  remarkable  prescience,"  said  Bulsara.  "I'm  just  happy  to  be  able  to  give  some¬ 
thing  back  to  the  country,  the  Navy  and  SSC  Pacific,  which  have  all  been  very  good  to  my  family  and  me." 

Axford  is  internationally  recognized  as  a  leader  in  Navy  satellite  communications.  In  2004,  Axford  became 
the  Navy  lead  for  the  Ka-band  feederlinks  portion  of  Mobile  User  Objective  System  and  continues  to  serve  in 
this  role  today.  In  addition,  he  supports  an  Office  of  Naval  Research  funded  project  on  topside  electromag¬ 
netic  interference  mitigation  using  forward  error  correction  methods  in  digital  communications.  In  June  2005, 
Axford  also  received  the  prestigious  Lauritsen-Bennett  award  for  outstanding  leadership  in  improving  the 
quality  of  Navy  optical  and  radio  communications. 

"I  have  been  extremely  fortunate  in  my  career  at  the  center  to  work  with  an  assortment  of  talented  individu¬ 
als,"  said  Axford.  "I  have  put  in  many  long  hours,  but  very  few  of  my  achievements  have  resulted  entirely  from 
solo  efforts.  I  am  honored  to  be  recognized  with  the  ST  promotion." 

For  more  information  about  SPAWAR,  go  to  http://enterprise.spawar.navy.mil.  CHIPS 


SPAWAR  Systems  Center  Pacific  employees  Dr.  Adi  Bulsara  (left)  and  Dr.  Roy  Axford  were  recently  selected  as  distin¬ 
guished  Scientists/Technologists.  The  appointment  for  the  science  and  technology  community  is  similar  to  an  appoint¬ 
ment  in  the  Senior  Executive  Service.  There  are  only  41  such  appointments  throughout  the  Department  of  the  Navy. 


Those  who  have  found  success  in  their  careers  did 
not  do  it  alone.  Along  the  way  they  found  someone  who 
they  respected  and  who  had  a  positive  impact  on  their 
personal  and  professional  life.  This  mentor  shared  re¬ 
sources,  time,  experiences  and  expertise. 

Now  Surface  Warfare  Officers  (SWO)  can  establish 
these  relationships  over  the  Internet.  The  Surface  War¬ 
fare  Officer  e-Mentor  Program  was  established  Feb.  2 
to  capitalize  on  the  diversity  of  talent  within  the  Surface 
Community.  The  program  encourages  sharing  SWO 
values  and  knowledge  throughout  the  community. 

Surface  Warriors  serve  around  the  globe  at  the 
highest  operational  tempo  in  history,  which  creates  a 
challenge  for  SWOs,  junior  and  senior  alike,  who  need 
career  guidance,  but  have  trouble  finding  a  mentor  that 
can  help  guide  them  in  their  Navy  career. 

To  connect  these  professionals  with  a  mentor,  SUR¬ 
FOR  has  implemented  a  mentor  matching  tool  via  the 
Internet  to  encourage  professional  development  and 
serve  as  an  information  exchange  for  officers  facing 
daily  work  and  life  challenges. 

“Our  community  is  widely  known  for  developing  lead¬ 
ers  by  promoting  training,  practical  experience  and  best 
practices  while  giving  consideration  to  the  diversity  of 
backgrounds  in  our  Surface  Force,”  said  Vice  Adm. 
D.C.  Curtis,  Commander  Naval  Surface  Forces  and 
Commander,  Naval  Surface  Force,  U.S.  Pacific  Fleet. 

“Much  of  this  knowledge  is  passed  along  through 
mentoring,  which  is  the  foundation  of  good  leadership,” 
Curtis  said. 

The  e-Mentor  program  facilitates  relationships  by  uti¬ 
lizing  technology  and  formalizing  matches.  Knowledge, 
skills,  life  and  professional  experiences  are  looked  at 
for  both  mentor  and  mentee.  The  tools  on  the  e-Mentor 
site  will  then  assist  SWOs  in  matching  themselves  with 
potential  mentors  who  have  similar  perspectives  or  ex¬ 
periences  throughout  the  community. 

Beginning  Feb.  16,  SWOs  can  go  to  https:// 
www.3creekmentoring.com/swo_mentoring  to  create 
a  profile  and  perform  an  online  mentor  search.  Men¬ 
tor  profiles  will  appear,  and  searches  can  be  narrowed 
by  entering  location,  experience,  designator,  and  rank 
information.  A  preferred  mentor  is  contacted  by  the 
mentee,  and  together  they  can  establish  goals  and  a 
professional  development  action  plan. 

The  Web  site  also  has  professional  articles  on  men¬ 
toring  and  career  guidance  and  offers  progress  tracking 
tools.  Once  a  partnership  is  established,  communica¬ 
tions  are  facilitated  through  e-mail,  face-to-face  meet¬ 
ings  or  teleconferencing.  CHIPS 
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NSTC  DEVELOPING  NEW  VIDEO  GAME 

NeWKDLE-PULYINGG&ME  ENHANCES  A  5AILDHr5  CRJTtkL  THINKING  AN  El  PfiOBLEM-SdLYING  AEILITY 


By  Scott  A.  Thornbloom 

Move  over  Xbox,  video  computer  gam¬ 
ing  is  coming  to  the  Navy.  But  unlike  pop¬ 
ular  combative  games,  such  as  Halo  3  or 
Madden  NFL  09,  this  game  will  be  a  train¬ 
ing  tool  adapted  to  a  new  generation  of 
gaming  Sailors. 

"This  has  the  look  and  feel  of  a  first-per¬ 
son  role-playing  game,  but  it  would  be 
better  to  call  it  a  training  simulation  de¬ 
signed  to  enhance  a  Sailor's  critical  think¬ 
ing,  problem  solving,  decision  making 
and  ultimately  on-the-job  performance," 
said  Rodney  Chapman,  director  of  Learn¬ 
ing  Strategies  (N9)  at  Naval  Service  Train¬ 
ing  Command  (NSTC). 

The  new  Navy  video  computer  train¬ 
ing  tool  called  VESSEL,  or  Virtual  Environ¬ 
ments  for  Ship  and  Shore  Experiential 
Learning,  combines  first  person  role- 
playing  with  real-world  training  and  strat¬ 
egy  into  a  computer-based  game. 

"This  is  uncharted  waters,"  Chapman 
said.  "We  are  using  game-based  tech¬ 
nology  to  supplement  instructor-led 
training.  This  strategy  should  lead  to  im¬ 
proved  Sailor  readiness  and  performance 
where  the  Navy  can  introduce  real-time 
fleet  concepts  to  Sailors  at  various  stages 
of  their  career.  We  happen  to  be  starting 
this  effort  in  Great  Lakes;  however,  the 
strength  of  this  technology  is  applicable 
and  will  help  improve  all  Sailors  no  matter 
how  senior  or  experienced." 

Although  there  are  flight  simulators  for 
Navy  pilots  and  large  bridge  simulators 
for  Navy  surface  officers  to  learn  naviga¬ 
tion,  VESSEL  can  be  accessed  by  merely 
popping  a  disc  into  a  computer,  just  like 
inserting  a  disc  into  a  PlayStation  or  Xbox. 

Through  partnerships,  with  BBN  Tech¬ 
nologies;  Intelligent  Decisions  Systems, 
Inc.;  the  University  of  California,  Los  An¬ 
geles;  University  of  Central  Florida  (UCF); 
the  Office  of  Naval  Research;  and  Recruit 
Training  Command  (RTC),  NSTC's  N9  de¬ 
partment  designed  the  computer-based 
training  tool  to  be  adaptive  to  enhance 
learning  and  build  confidence  for  Sailors 
who  will  be  handling  shipboard  opera¬ 
tions  and  casualties  such  as  flooding  and 
firefighting. 

Dr.  Clint  Bowers,  a  psychology  profes¬ 
sor  at  UCF,  said  the  game  has  an  intrinsic 


Sailors  report  to  the  "Petty  Officer  of  the  Watch"  on 
the  quarterdeck  of  their  first  ship  during  the  virtual 
introductory  story  for  VESSEL,  a  new  "Virtual  Envi¬ 
ronments  for  Ship  and  Shore  Experiential  Learn¬ 
ing"  computer  game  designed  to  enhance  a  Sailor's 
critical  thinking,  problem  solving,  decision  making 
and  ultimately  on-the-job  performance.  U.  S.  Navy 
photo  by  Scott  A.  Thornbloom,  Naval  Service  Train¬ 
ing  Command  Public  Affairs  Office. 

quality  that  motivates  young  people.  "If 
we  can  tap  that  motivation  so  that  Sailors 
want  to  go  back  to  their  room  or  com¬ 
partment  and  play  and  learn  and  not  feel 
they  are  in  a  classroom,  we  think  that  will 
be  a  great  thing." 

Sailors  have  participated  in  the  game's 
evaluation  since  October  2008,  and  Bow¬ 
ers  said  they  have  demonstrated  a  high 
level  of  interest.  "It's  one  thing  to  build  a 
game,  but  we  need  to  make  sure  it  works 
and  we  are  seeing  that  it  is." 

The  first  simulation  is  designed  to  have 
Sailors  investigate  a  space  aboard  a  ship 
for  flooding  from  a  cracked  firemain.  Just 
like  popular  action-packed  video  games, 
the  scenario  begins  with  a  short  story  to 
set  the  stage. 

In  the  game,  Sailors  find  they  have 
transferred  from  Naval  Station  Great 
Lakes  to  their  first  ship  in  Norfolk,  Va.  After 
boarding  the  ship,  Sailors  enter  the  game 
in  a  first-person  role-playing  scenario  and 
must  report  to  their  repair  locker  after  the 
general  quarters  alarm  has  sounded. 

From  the  repair  locker,  Sailors  are  sent 
as  investigators  and  directed  to  look  for 
a  possible  flood  in  a  certain  space.  Sailors 


will  need  to  find  the  space  by  locating  the 
correct  "bulls-eye"  (numbered  identifica¬ 
tion  outside  the  space  on  the  bulkhead) 
and,  once  found,  go  into  the  space  where 
they  will  find  there  is  flooding  from  a 
crack  on  the  firemain.  Sailors  should  then 
call  Damage  Control  (DC)  Central  and  re¬ 
port  the  situation. 

"A  more  senior  enlisted  Sailor  might 
want  to  shut  down  the  firemain  and  cut 
off  the  water,  but  that  would  be  wrong  in 
this  simulation,"  Chapman  said. 

"We  want  the  Sailor  to  report  the  flood¬ 
ing  to  DC  Central  using  the  shipboard 
phone  IVCS  (Integrated  Voice  Commu¬ 
nications  System)  in  the  space,  then  go 
back  to  the  repair  locker  and  pick  up  the 
equipment  they  might  need  [in  this  case, 
a  jubilee  patch],  bring  the  equipment 
back  to  the  space  and  properly  patch  the 
pipe." 

In  the  simulation  there  is  only  one  way 
to  seat  the  jubilee  patch,  by  putting  it  on 
the  pipe  and  sliding  it  from  the  top  down 
over  the  crack.  If  the  Sailor  doesn't  seat 
the  patch  correctly,  it  will  come  off. 

Sailors  are  graded  on  how  long  it  takes 
to  report  to  the  repair  locker,  find  the 
flooded  space,  report  to  DC  Central,  re¬ 
turn  to  the  repair  locker,  and  patch  the 
pipe. 

If  Sailors  perform  correctly  by  maneu¬ 
vering  through  the  game,  they  would 
then  need  to  call  back  to  DC  Central  and 
make  a  final  report  of  what  they  did  and 
how  they  accomplished  the  task. 

An  example  of  what  a  Sailor  might  re¬ 
port  would  be,  "Flooding  was  secured 
by  properly  applying  jubilee  patch  over 
crack  on  firemain  in  space  1-109-2-L, 
admin  berthing.  There  is  two  inches  of 
water  on  deck,  or  there  is  no  water  com¬ 
ing  up  through  the  grates.  Request  de¬ 
watering  team  is  sent  to  compartment." 

After  a  Sailor  has  made  a  final  report 
and  has  been  told  that  a  dewatering  team 
has  been  sent  to  the  space,  objectives  for 
the  evolution  show  up  on  the  left  side  of 
the  computer  monitor  with  a  green,  yel¬ 
low  or  red  indicator. 

If  an  objective  lights  up  green,  the 
Sailor  has  successfully  met  that  objec¬ 
tive.  If  yellow  lights  up,  the  recruit  com¬ 
pleted  the  objective  but  performed 
marginally  and  could  have  been  fast¬ 
er  making  reports,  getting  the  right 
equipment  or  he  or  she  may  have 
taken  too  long  patching  the  firemain. 

Red  means  a  failure  for  that  particular 
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During  the  hands-on-training  with  Virtual  Environments  for  Ship  and  Shore  Ex¬ 
periential  Learning  (VESSEL),  Sailors  talk  to  Damage  Control  (DC)  Central  using 
a  virtual  shipboard  Integrated  Voice  Communications  System  (IVCS)  phone  to 
report  damage  and  get  further  instructions  to  repair  a  damaged  firemain. 


At  left,  in  the  VESSEL 
scenario  the  ship  is  in 
the  Persian  Gulf,  general 
quarters  is  sounded, 
and  Sailors  must  apply  a 
jubilee  patch  to  a  dam¬ 
aged  firemain.  VESSEL 
provides  an  adaptable 
learning  experience 
for  young  Sailors  who 
are  experienced  video 
game  players.  Below, 
Seaman  Apprentice 
Melvin  Cooks,  18,  from 
East  St.  Louis,  III.,  "plays" 
VESSEL.  Cooks  is  attend¬ 
ing  Boatswain's  Mate 
"A"  School.  U.S.  Navy 
photos  by  Scott  Thorn- 
bloom,  NSTC  public 
affairs  office. 


objective,  and  the  actions  performed  in¬ 
correctly  will  be  identified.  The  Sailor  will 
need  to  go  through  the  task  again. 

After  the  objectives  have  been  graded 
Sailors  will  then  be  directed  to  an  Indi¬ 
vidual  Development  Plan  (IDP).  The  plan 
is  based  on  how  well  they  did  and  what 
areas  need  work.  Sailors  are  then  told 
where  to  go  to  receive  more  instruction 
on  the  identified  area  for  improvement. 

"This  was  a  great  experience, "said  Sea¬ 
man  Apprentice  Melvin  Cooks,  age  18, 
from  East  St.  Louis,  III.  "I  think  this  will  help 
Sailors  in  here  at  Great  Lakes  and  in  the 
fleet  to  strengthen  and  refresh  what  they 
learned  at  boot  camp  and  in  school." 

Cooks,  a  student  at  Boatswain's  Mate 
"A"  School  and  an  early  test  subject, 
added  that  gaming  tools,  like  Battle  Sta¬ 
tions  21  and  VESSEL,  help  Sailors  be  more 
prepared  to  handle  situations  and  emer¬ 
gencies  on  board  ships  and  in  the  fleet. 

Chapman  called  the  IDP  the  most  im¬ 
portant  thing  for  each  Sailor. 

"Ultimately,  besides  the  usability  of  the 
game,  we've  put  in  enhancements  with 
the  Individual  Development  Plan.  If  I  be¬ 
lieved  they  were  going  to  walk  away  from 
the  test  and  remember  what  they  were 
supposed  to  work  on,  I'd  be  sadly  mistak¬ 
en.  We  are  going  to  deliver  an  Individual 
Development  Plan  with  further  instruc¬ 
tion  and  training  to  make  them  better 
Sailors,"  he  said. 

Early  indications  of  improved  Sailor 
performance  are  encouraging  and  im¬ 


pressive,  according  to  Chapman.  Two 
groups  of  Sailors  were  selected  to  par¬ 
ticipate  in  a  study  that  required  them  to 
secure  flooding  in  a  main  space  on  board 
the  Navy's  largest  training  simulator,  USS 
Trayer  (Battle  Stations  21),  a  210-foot  long 
Arleigh  Burke-class  destroyer,  located  at 
Recruit  Training  Command  Great  Lakes. 

Both  groups  had  basic  damage  control 
training  but  had  no  previous  exposure  to 
the  Trayer's  internal  compartments  or  de¬ 
sign.  Only  one  of  the  two  groups  played 
VESSEL.  The  Sailors  who  played  VESSEL 
found  the  flooded  compartment  using  a 
bull's-eye,  learned  from  the  game,  in  half 
the  time  than  the  Sailors  who  didn't  play 
the  game  (two  versus  four  minutes).  Sail¬ 
ors  had  less  than  half  (eight  versus  17)  of 
the  communications  errors  when  making 
reports  to  DC  Central. 

Twice  as  many  (50  percent  versus  25 
percent)  non-VESSEL  participants  re¬ 
paired  the  leak  without  permission  and 
50  percent  of  the  non-VESSEL  partici¬ 
pants  secured  the  firemain  without  per¬ 
mission.  No  one  from  the  group  exposed 
to  VESSEL  secured  the  firemain. 

Even  though  N9  and  ONR  have  been 
testing  the  game  on  recruits  from  RTC 
since  October  2008,  VESSEL  is  not  geared 
toward  passing  Battle  Stations  21,  the 
final  test  for  a  recruit  before  graduating 
from  the  Navy's  only  boot  camp.  Battle 
Stations  21  is  conducted  on  board  Trayer 
a  week  prior  to  graduation. 

"We  didn't  specifically  build  this  for 


Battle  Stations  21  because  we  knew 
there  would  be  a  far-reaching  benefit  to 
the  rest  of  the  Navy  enterprise.  We  pur¬ 
posely  built  this  [VESSEL]  so  it  could  be 
used  at  RTC  or  delivered  to  TSC  (Train¬ 
ing  Support  Center)  and  other  training 
or  shipboard  commands  fleet-wide.  The 
educational  outcome  and  benefits  [of 
VESSEL]  will  be  consistent  if  you  are  in 
recruit  training  or  out  in  the  fleet.  Wheth¬ 
er  you  are  a  recruit,  a  bluejacket,  chief 
or  officer;  this  will  benefit  all  Sailors." 

The  N9  team  is  working  with  ONR  to 
build  more  scenarios  to  accompany  the 
flooding  model.  They  are  exploring  add¬ 
ing  oil  on  top  of  the  flooded  water  and 
placing  hot  electric  wires  and  personnel 
casualties  in  the  space. 

"We  are  going  to  add  firefighting  to 
it  as  another  training  opportunity  and 
continue  to  build  out  to  be  an  enterprise¬ 
wide  learning  tool,"  Chapman  said. 

Chapman  hopes  both  delayed-entry 
personnel,  as  well  as  Sailors  in  the  fleet, 
will  use  VESSEL  as  another  training  tool. 

"We  are  entering  an  era  where  we  are 
demanding  more  from  our  Sailors  and 
they  have  to  master  things  in  a  shorter 
period  of  time.  We  no  longer  have  the 
luxury  to  put  Sailors  through  long  periods 
of  training."  CHIPS 


For  more  information  NSTC  public  affairs  office,  at 
(847)  688-2201. 
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By  Retired  U.S. 


Ding,  Dong,  the  Witch  is  Dead  ... 

Well,  one  of  them  is,  at  least  in  theory. 
I  am  pleased  to  report  that  someone 
seems  to  have  figured  out  how  to  kill  a 
botnet.  And  not  just  any  botnet,  but  the 
Storm  botnet,  a  wicked  system  alleged  to 
have  infected  more  than  1  million  com¬ 
puters  during  its  existence. 

A  team  of  researchers  from  Bonn  and 
RWTH  Aachen  universities  analyzed  the 
notorious  Storm  botnet  and  developed 
an  application  that  links  itself  into  the 
peer-to-peer  (P2P)  structure  of  a  Storm 
worm  network.  Once  there,  it  can  divert 
drones  to  a  new  server  controlled  by  the 
cleanup  crew  which  can  then  issue  com¬ 
mands  to  the  Storm  drones. 

The  server  would  direct  the  drones  to 
download  a  special  cleaning  program 
that  would  remove  Storm  from  the  com¬ 
puter.  Researchers  think  that  their  system 
will  be  able  to  dismantle  a  network  of 
more  than  100,000  drones  without  any 
danger  of  the  central  cleaning  server  col¬ 
lapsing  under  the  load  or  suffering  dis¬ 
tributed  denial  of  service  attacks  from 
botnet  operators. 

There  is,  however,  one  slight  catch: 
employing  this  system  might  violate  vari¬ 
ous  national  laws  against  unauthorized 
access  to  third-party  computers  or  data 
tampering.  In  Germany,  the  home  of  the 
research  team,  they  could  face  two  years 
of  imprisonment  for  unlawfully  deleting, 
suppressing,  making  unusable  or  chang¬ 
ing  third-party  data. 

Other  nations,  including  the  United 
States,  have  similar  provisions.  In  addition 
to  criminal  charges,  you  have  to  consider 
civil  liability  in  case  the  cleanup  applica¬ 
tion  accidentally  turns  the  computers  into 
large,  polycarbonate  silicon  boat  anchors. 


But  all  is  not  lost,  even  if  the  cleanup 
application  is  never  deployed.  In  Septem¬ 
ber  2008,  a  California-based  Internet  ser¬ 
vice  provider  (ISP),  Atrivo/lntercage,  long 
alleged  to  be  associated  with  the  equally 
infamous  "Russian  Business  Group"  cyber 
crime  collective,  was  disconnected  from 
the  Internet  by  its  upstream  provider. 
Some  declared  this  the  final  nail  in  the 
coffin  for  the  Storm  worms  because  At- 
rivo  allegedly  hosted  Storm's  control 
servers. 

However,  despite  concerted  efforts  to 
clean  it  up,  Storm  is  still  thought  to  have 
100,000  or  so  zombies  still  at  large,  albeit 
without  much  in  the  way  of  a  command 
and  control  (C2)  structure.  And  even  if 
someone  wipes  Storm  completely  off  the 
face  of  the  Internet  tomorrow,  there  are 
other  botnets  waiting  to  try  and  fill  95 
percent  of  our  inboxes  with  spam.  But  at 
least  security  researchers  are  working  to 
combat  them. 

Brave  New  Botnets 

Shortly  after  Atrivo  was  turned  off,  host¬ 
ing  provider  McColo  —  a  network  that 
allegedly  absorbed  many  of  the  cyber 
roaches  fleeing  Atrivo's  shutdown  —  was 
also  unplugged  by  its  upstream  providers 
in  November.  That  stung,  among  others, 
the  Srizbi  botnet,  another  massive  spam- 
producing  operation  with  an  estimated 
450,000  infected  computers.  Organiza¬ 
tions  that  monitor  Internet  traffic  noted 
anywhere  from  a  50  to  75  percent  reduc¬ 
tion  in  e-mail  spam  on  the  day  McColo 
was  taken  down. 

Another  less  sophisticated  but  viru¬ 
lent  botnet  that  ran  into  trouble  in  2008 
was  Bobax  (aka  Kraken),  which  has  been 
around  since  2004.  In  April  2008,  Secure¬ 
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Works,  a  network  security  provider,  re¬ 
ported  that  Bobax  was  the  largest  spam 
botnet  with  185,000  active  bots.  Unfor¬ 
tunately  for  Bobax,  it  relied  on  a  single 
hosting  provider  for  its  connectivity.  In 
December  2008,  that  provider  killed  all  of 
Bobax's  control  servers. 

However,  much  like  cockroaches,  you 
can  never  really  be  completely  sure  that 
a  botnet  is  dead,  so  it  remains  to  be  seen 
if  Bobax  is  dead  or  merely  waiting  for  new 
masters. 

Unfortunately,  that  is  pretty  much 
where  the  good  news  ends.  The  reduc¬ 
tions  in  spam  from  disconnecting  Atrivo 
and  McColo  were  temporary  because 
other,  more  sophisticated  botnets  using 
encrypted  or  custom  communication 
protocols,  which  are  not  dependent  on  a 
single  host  provider  for  C2,  have  moved 
in  to  fill  the  gaps.  Botnets  named  Cutwail, 
Rustock,  Donbot  and  Ozdok,  each  report¬ 
edly  controlling  more  than  100,000  com¬ 
promised  clients,  will  be  sending  spam  as 
fast  as  they  can  generate  it. 

And  there  are  more  waiting  in  line 
behind  them,  including  a  botnet  called 
Waledac  that  seems  to  be  a  rewrite  of 
Storm.  Much  as  we  like  to  kill  off  botnets, 
they  not  only  seem  to  have  the  resilience 
of  cockroaches;  they  breed  like  them  too. 
As  quickly  as  security  and  legal  teams  find 
and  eliminate  botnets,  botnet  owners  de¬ 
velop  more  sophisticated  systems. 

Instead  of  using  a  single  host  for  C2, 
they  distribute  over  many  hosts.  Bot 
herders  are  hardening  their  systems  with 
encryption  both  for  communications  and 
botnet  clients. 

They  are  also  programming  their  zom¬ 
bie  clients  to  send  traffic  to  many  Web 
addresses,  in  addition  to  their  C2  servers, 
to  make  finding  the  actual  control  servers 
more  difficult. 

So,  though  there  has  been  some 
progress  fighting  botnets,  overall,  we  still 
don't  have  a  pretty  picture.  For  more  on 
the  botnet  outlook  for  2009,  allow  me  to 
recommend  an  article,  "Spam  Botnets  to 
Watch  in  2009"  on  the  SecureWorks  Web 
site  at:  www.secureworks.com. 

The  Top  25 

In  addition  to  trying  to  kill  botnets  out¬ 
right,  another  strategy  is  to  deny  them 
new  zombies.  With  that  in  mind,  comput¬ 
er  security  experts  from  35  international, 
academic,  corporate  and  government 
organizations  released  a  list  in  January 


of  the  25  most  dangerous  programming 
errors  that  create  security  vulnerabilities 
and  how  to  avoid  or  fix  them. 

The  U.S.  federal  government  was  rep¬ 
resented  by  members  of  the  National 
Security  Agency's  Information  Assurance 
Division  and  the  Department  of  Home¬ 
land  Security's  National  Cyber  Security 
Division. 

The  group  divided  the  vulnerabilities 


other  attacks,  confuse  the  system  enough 
so  that  the  attacker  can  then  do  other 
nefarious  things. 

When  malware  permits  read  or  write 
operations  on  memory  located  outside 
of  an  allocated  range,  an  attacker  may  be 
able  to  access/modify  sensitive  informa¬ 
tion,  cause  the  system  to  crash,  alter  the 
intended  control  flow,  or  execute  arbi¬ 
trary  code. 


not  designed  to  reject  improper  input,  it 
may  become  confused  when  attacked  by 
input  modified  in  unexpected  ways. 

Another  potential  avenue  for  insecure 
interactions  uses  Structured  Query  Lan¬ 
guage.  An  SQL  injection  attack  occurs 
when  an  attacker  tries  to  modify  the  SQL 
code  that  is  used  to  communicate  with 
databases. 

For  example,  if  a  system  uses  SQL  que¬ 
ries  in  authentication  security  controls,  an 
attacker  can  attempt  to  alter  the  logic  of 
those  queries  to  bypass  security.  Other 
uses  for  SQL  injection  include  modify¬ 
ing  queries  to  steal,  corrupt  or  otherwise 
change  data. 

Cross-site  scripting  (XSS)  is  a  dangerous 
vulnerability  associated  with  Web  appli¬ 
cations.  In  XSS,  attackers  try  to  add  Java¬ 
Script  or  other  browser-executable  con¬ 
tent  into  a  Web  site.  When  users  browse  a 
tainted  page,  their  browser  executes  the 
malicious  script.  This  attack  is  particularly 
effective  if  the  infected  site  is  a  high  traf¬ 
fic,  trusted  site.  Visitors  are  "infected"  as 
they  "drive  by"  the  site  whether  or  not 
they  download  any  content. 

The  No.  1  risky  resource  management 
vulnerability  is  the  "Failure  to  Constrain 
Operations  within  the  Bounds  of  a 
Memory  Buffer,"  or  buffer  overflow,  for 
short.  A  buffer  overflow  happens  when 
a  program  attempts  to  put  more  data  in 
a  buffer  than  it  can  hold  or  attempts  to 
put  data  in  a  memory  area  outside  of  the 
boundaries  of  a  buffer.  This  can,  as  with 


study  and  snoop  in  your  checkbook. 

Standard  system  passwords  are  not 
new,  though  most  of  them  are  also  not 
particularly  secret.  Most  systems  come 
with  a  default  administrator  account,  and 
you  can  bet  any  hacker  worth  his  salt  will 
either  have  a  list  of  default  passwords  for 
popular  systems  or  will  have  purchased 
(or  stolen)  a  copy  of  the  system  to  figure 
out  the  default  account. 

Smart  system  administrators  change 
these  defaults  as  soon  as  a  system  is  in¬ 
stalled.  However,  some  developers  have 
been  known  to  write  secret  accounts  into 
their  systems,  thus  leaving  a  somewhat 
permanent  vulnerability  available  to  any 
hacker  who  can  find  it. 

Client-side  security  enforcement  prob¬ 
lems  occur  when  you  trust  client  software 
to  perform  security  checks  on  behalf  of 
your  server.  Unfortunately,  it  leaves  the 
keys  to  system  access  in  the  client  soft¬ 
ware  —  an  open  invitation  for  hackers 
to  reverse-engineer  the  client  and  write 
their  own  version  —  which,  of  course,  will 
omit  the  security  controls. 

Combined  with  some  of  the  previously 
mentioned  authentication,  authorization 
and  input  validation  issues,  this  can  be 
quite  dangerous.  While  client-side  valida¬ 
tion  may  be  convenient  at  some  level,  it  is 
not  a  good  security  practice. 

These  are  just  general  descriptions  of 
only  a  few  of  the  common  weaknesses 
described  in  the  report.  For  a  complete 
report  on  the  conference,  more  detailed 


descriptions  of  all  25  vulnerabilities,  and 
discussion  of  how  to  avoid  them,  please 
see  the  conference  report  on  the  Sans  In¬ 
stitute  Web  site  at  www.sans.org. 

IVIy  Top  Six  List 

So,  where  does  cyber  security  go  from 
here?  Based  on  what  we  have  been  dis¬ 
cussing  for  the  last  year  and  what  we  are 
seeing  in  cyberspace,  here  are  my  "Top 
Six"  cyber  security  predictions  for  the 
next  few  years. 

Stealthier  Attack  Methods.  Given  the 
evolution  in  botnet  technology  toward 
decentralization  and  encryption,  the  bot 
herders  that  survive  the  current  world¬ 
wide  purge  will  be  those  who  fly  under 
the  radar.  Early  botnets  thrived  because 
people  either  did  not  know  they  existed 
—  or  did  not  believe  they  existed. 

Dedicated  security  professionals,  many 
of  them  working  together,  amassed 
enough  evidence  to  start  the  gradually 
increasing  avalanche  of  cyber  security 
and  legal  activity  that  is  burying  the  less 
agile  botnets. 

However,  like  using  an  antibiotic  that 
kills  only  99  percent  of  virulent  germs,  the 
remaining  1  percent  may  remain  resistant 
to  what  worked  the  first  time  and  trans¬ 
form  into  something  even  more  preda¬ 
tory.  The  next  generation  of  botnets  may 
not  be  as  easy  to  detect. 

Smarter  Attacks.  Brute  force  attacks,  a 
method  of  defeating  a  cryptographic 
scheme  by  systematically  trying  a  large 
number  of  possibilities,  which  can  include 
a  dictionary  attack,  while  still  possible,  are 
being  supplanted  by  more  intelligent  at¬ 
tack  methods,  like  collecting  publicly 
available  documents  and  files  from  a  tar¬ 
get  and  analyzing  their  metadata  to  de¬ 
velop  attack  profiles. 

You  can  see  a  basic  example  of  this  by 
opening  any  common  document  format, 
going  to  the  "File"  menu  and  clicking  on 
"Properties."  This  will  reveal  what  the  file 
knows  about  itself,  including  the  soft¬ 
ware  version  used  to  prepare  it  and  pos¬ 
sibly  the  author's  name  and  organization. 

This  can  help  a  hacker  on  two  levels:  (1) 
He  now  knows  the  software  the  organi¬ 
zation  uses,  which  gives  him  a  potential 
technical  attack  vector  if  that  software 
has  vulnerabilities,  and  (2)  It  may  give  him 
names  and  other  organizational  informa¬ 
tion  to  plan  a  social  engineering  attack. 


CHIPS  April -June  2009  51 


Autonomous 

Evolution. 

Military 
troops 
prefer  fire- 
and-forget 
weapons 
because  they 
can  launch  an 
attack  with¬ 
out  being  exposed  to  enemy  fire.  They  can 
just  pull  the  trigger  and  a  smart  weapon 
takes  care  of  the  rest. 

Hackers  like  this  paradigm  too.  I  offer  as 
an  example  the  recent  attacks  by  a  worm 
known  as  Downadup  or  Conficker.  This 
rapidly  spreading  worm  may  be  a  tool  for 
building  a  huge  new  botnet,  according  to 
security  researchers.  It  spreads  itself,  and 
then  it  prevents  infected  PCs  from  being 
cleaned  up. 

Once  implanted,  the  worm  searches 
out  nearby  servers  and  executes  a  brute 
force  password-breaking  program.  It  also 
spreads  itself  to  any  shared  hard  drives. 
What's  more,  it  makes  a  copy  of  itself  on 
any  device  plugged  into  a  USB  port,  such 
as  any  thumb  drives,  music  players  or  digi¬ 
tal  cameras.  When  that  infected  device  is 
later  plugged  into  another  PC,  it  infects 
that  machine,  which  then  begins  to  simi¬ 
larly  spread  more  infections. 


Big  Bulls-Eves.  MarkTwain  once  comment¬ 
ed  that  ifyou  put  all  your  eggs  in  one  basket 
you  should  watch  that  basketvery  carefully. 

With  the  centralization  of  data  stores 
over  the  last  decade,  much  of  our  im¬ 
portant  financial,  corporate  and  govern¬ 
ment  information  is  migrating  to  fewer 
and  larger  network  and  storage  systems. 

However,  as  we  discovered  with  banks 
and  the  Wild  West,  when  you  gather  to¬ 
gether  large  sums  of  money  in  one  place, 
you  attract  thieves.  News  stories  these 
days  are  full  of  reported  breaches  into 
centralized  credit  card  databases  and 
other  sensitive  information  repositories. 

It  is  a  bit  like  the  situation  that  con¬ 
fronted  Lt.  Gen.  Walter  Short,  the  Army 
Air  Corps  commander  responsible  for  the 
defense  of  U.S.  military  installations  in  Ha¬ 
waii  at  the  time  of  the  Japanese  attack  on 
Pearl  Harbor  Dec.  7, 1941. 

Based  on  prevailing  belief  that  local 
Japanese  sympathizers  were  a  greater 
threat  than  a  Japanese  air  attack,  Short 
made,  what  was  arguably  a  reasonable 
decision.  Short  rationalized  that  cluster¬ 


ing  parked  aircraft  would  be  easier  to 
protect  against  saboteurs  than  dispersing 
the  aircraft. 

Unfortunately,  his  strategy  turned  out 
to  be  tragically  wrong.  On  Short's  orders, 
the  Army  parked  planes  in  such  a  way  as 
to  make  them  more  vulnerable  to  aerial 
attack. 

Compartmentalizing  information  pro¬ 
tects  it  at  the  expense  of  making  it  less 
convenient  to  use.  Centralizing  informa¬ 
tion  makes  it  easier  to  use,  but  at  the  po¬ 
tential  risk  of  giving  away  the  entire  store 
if  someone  gains  unauthorized  access. 

We  should  not  limit  ourselves  to  think¬ 
ing  in  three-dimensional  terms,  as  Short 
strategized  in  positioning  Army  aircraft, 
because  in  cyberspace,  it  does  not  matter 
where  things  are  physically  located. 

The  people  who  will  make  a  lot  of 
money  in  the  next  decade  will  be  the 
ones  who  figure  out  how  to  give  com¬ 
partmentalized  information  the  same 
ease  of  use  as  centralized  information,  so 
that  authorized  users  will  still  have  access 
—  without  compromising  security. 

If  hackers  can  decentralize  their  bot¬ 
nets  to  defend  against  detection  and 
elimination  while  still  maintaining  cen¬ 
tralized  command  and  control,  then  we 
should  be  able  to  do  the  same  to  defend 
our  information  resources. 

System  Lockdowns.  On  the  positive  side,  it 
appears  that  network  administrators  and 
security  professionals  are  making  prog¬ 
ress  in  securing  systems.  Internet  service 
providers  are  now  looking  at  security  less 
as  an  inconvenience  and  as  more  of  a  way 
to  protect  their  customers. 

In  one  example  reported  by  Spamhaus, 
a  major  ISP,  allegedly  home  to  25  percent 
of  e-mail  spam  that  originated  inside  the 
United  States,  moved  its  Web-based  e- 
mail  traffic  from  Port  25,  which  does  not 
require  authentication,  to  Port  587,  which 
requires  an  account  ID  and  password  to 
send  e-mail. 

Port  25  was  a  traditional  channel  for 
large  organization  e-mail  communica¬ 
tions,  but  because  of  its  lack  of  authenti¬ 
cation  it  is  a  favorite  target  for  junk  e-mail 
relays  once  a  computer  is  infected. 

While  moving  to  Port  587  will  not  stop  a 
zombie  from  sending  spam,  it  will  require 
that  zombie  to  identify  itself  to  the  sys¬ 
tem,  which  helps  in  tracking  and  cleanup. 

Yes,  We  Can.  This  last  prediction  is  less  a 


trend  than  a  hope.  The  last  thing  most 
users  want  to  see  is  one  more  computer 
security  control  that  disables  or  locks 
down  what  they  consider  useful  function¬ 
ality  on  their  PC  or  network. 

Granted,  there  have  been  good  reasons 
to  clamp  down  because  lots  of  bad  peo¬ 
ple  really  are  out  to  get  us  and  get  into 
our  systems.  But  the  "fortress  network" 
mentality  is  almost  totally  defensive,  and 
you  do  not  win  football  games,  or  wars, 
with  only  defensive  maneuvers. 

With  that  in  mind,  I  am  seeing,  in  some 
circles,  a  move  toward  positive  security, 
where  people  can  try  things  on  their 
computers  using  a  balanced  approach  to 
security  and  flexibility.  As  we  get  better 
at  protecting  our  networks,  I  hope  to  see 
more  flexibility  achieved  through  innova¬ 
tive  security  measures. 

Final  Words 

The  Internet  is  much  like  a  human 
body:  a  large  organism  with  a  huge  num¬ 
ber  of  interdependent  component  parts, 
including  hardware  and  software,  net¬ 
works  and  users,  control  mechanisms  and 
communications  links.  It  is,  thanks  to  its 
basic  design,  mostly  self-healing,  routing 
around  damage  and  regulating  the  flow 
of  data. 

Computer  security,  in  the  endgame, 
will  not  depend  on  securing  individual 
systems,  but  in  securing  all  systems.  It  will 
not  depend  solely  on  technical  measures, 
but  also  on  diplomatic,  legislative,  judicial 
and  political  change  at  home  and  abroad. 

As  long  as  viruses,  bacteria,  cockroach¬ 
es  and  bot  herders  have  a  place  to  hide, 
we  will  get  colds,  staph,  bugs  in  the  kitch¬ 
en  and  junk  e-mail. 

While  we,  personally,  may  not  be  able 
to  effect  all  the  global  technical,  political, 
diplomatic,  legislative  and  legal  changes 
required,  we  can  still  do  our  best  to  help 
shine  lights  into  dark  corners  and  make 
the  world  a  little  less  safe  for  the  roaches 
in  the  system.  CHIPS 

Until  next  time ,  Happy  Networking  and 
Good  Hunting! 

Long  is  a  retired  Air  Force  communications  officer 
who  has  written  regularly  for  CHIPS  since  1993.  He 
holds  a  master  of  science  degree  in  information  re¬ 
sources  management  from  the  Air  Force  Institute  of 
Technology.  He  currently  serves  as  a  telecommuni¬ 
cations  manager  in  the  Department  of  Homeland 
Security. 
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Enterprise  Software  Agreements 


Management  -  Provides  software,  maintenance 


Contractor:  Carahsoft  Inc.  (W91quz-07-a-0004) 

Authorized  Users:  This  BPA  is  open  for  ordering  by  a 

of  Defense  (DoD)  components  and  authorized  contractors. 

Ordering  Expires:  i9Nov09 

Web  Link:  https://ascp.monmouth.army.mil/scp/contrai 

viewcontract.jsp?cNum=W91QUZ-07-A-0004 


Department 


BDNA  Asset  Management 

ware,  maintenance  and  services. 

Contractor:  DLT Solutions  Inc.  (W9i  QUZ-07-A-0002) 
Authorized  Users:  This  BPA  has  been  designated  as  a  GSA  S 

Defense  (DoD) 


management  soft- 


Provides  asset 


BUY  and  is  open  for  ordering  by  all  Department  of 
ponents,  authorized  contractors  and  all  federal  agencies. 

Ordering  Expires:  01  Apr  13 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/ 
viewcontract.jsp?cNum=W91QUZ-07-A-0002 


The  Enterprise  Software  Initiative  is  a  Department  of  Defense  (DoD)  initia¬ 
tive  to  streamline  the  acquisition  process  and  provide  best-priced,  standards-com- 
pliant  information  technology  (IT). The  ESI  is  a  business  discipline  used  to  coordi¬ 
nate  multiple  IT  investments  and  leverage  the  buying  power  of  the  government  for 
commercial  IT  products  and  services.  By  consolidating  IT  requirements  and  nego¬ 
tiating  Enterprise  Agreements  with  software  vendors,  the  DoD  realizes  significant 
Total  Cost  of  Ownership  (TCO)  savings  in  IT  acquisition  and  maintenance. The  goal 
is  to  develop  and  implement  a  process  to  identify,  acquire,  distribute  and  manage 
IT  from  the  enterprise  level. 

Additionally,  the  ESI  was  incorporated  into  the  Defense  Federal  Acquisition  Regu¬ 
lation  Supplement  (DFARS)  Section  208.74  on  Oct.  25,  2002,  and  DoD  Instruction 
500.2  in  May  2003. 

Unless  otherwise  stated  authorized  ESI  users  include  all  DoD  components,  and 
their  employees  including  Reserve  component  (Guard  and  Reserve)  and  the  U.S. 
Coast  Guard  mobilized  or  attached  to  DoD;  other  government  employees  assigned 
to  and  working  with  DoD;  nonappropriated  funds  instrumentalities  such  as  NAFI 
employees;  Intelligence  Community  (1C)  covered  organizations  to  include  all  DoD 
Intel  System  member  organizations  and  employees,  but  not  the  CIA  nor  other  1C 
employees  unless  they  are  assigned  to  and  working  with  DoD  organizations;  DoD 
contractors  authorized  in  accordance  with  the  FAR;and  authorized  Foreign  Military 
Sales. 


BigFix  Asset  Management 

and  services. 

Contractor:  Patriot  Technoiogies  Inc.  (W9i  QUZ-07-A-0003) 
Authorized  Users:  This  BPA  has  been  designated  as  a  GSA  Smart- 
BUY  and  is  open  for  ordering  by  all  Department  of  Defense  (DoD)  com¬ 
ponents,  authorized  contractors  and  all  federal  agencies. 

Ordering  Expires:  08  Sep  12 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/ 
viewcontract.jsp?cNum=W91QUZ-07-A-0003 


software,  maintenance 


Provides 


Business  and  Modeling  Tools 


BPWin/ERWin 


Provides  products,  upgrades  and  warranty  for  ER- 
Win, a  data  modeling  solution  that  creates  and  maintains  databases,  data 
warehouses  and  enterprise  data  resource  models.  It  also  provides  BPWin, 
a  modeling  tool  used  to  analyze,  document  and  improve  complex  busi¬ 
ness  processes. 

Contractor:  Computer  Associates  International \  Inc. 

(W91 QUZ-04-A-0002) 

Ordering  Expires:  Upon  depletion  of  Army  Small  Computer  Pro- 


For  more  information 
site  at  http://www.esi. 


obtain  product  information,  visit  the  ESI  Web 


■■■■V-!  !■!■!■■■ 


Discovery  Tools 


Belmanage  Asset  Management 

services. 

Contractor:  Belarclnc.  (W91quz-07-a-0005) 
Authorized  Users:  This  BPA  is  open  for  ordering 
(DoD)  components  and  authorized  contractors. 

Ordering  Expires:  30  Sep  1 1 
Web 

jsp?cNi 


Provides 


software,  maintenance 


Business  Intelligence 


by  all  Department  of  Defense 


SS  Objects  -  Provides  software  licenses  and  support  for 
Objects,  Crystal  Reports,  Crystal  Enterprise  and  training 
:essional  services.  Volume  discounts  range  from  5  to  20  per- 
purchases  of  software  licenses  under  a  single  delivery  order. 

ctor:  EC  America,  Inc.  (SP4700-05-A-0003) 
ng  Expires:  04  May  10 

nk:  http://www.gsaweblink.com/esi-dod/boa/ 


.army.mil/scp/contracts/viewcontract. 


Remedy  Asset  Management  -  Provides  software,  maintenance  and 

Contractor:  BMC  Software  Inc. 

Authorized  Users:  This  bpa  is 
(DoD)  components  and  authorized 
Ordering  Expires:  29  May  09  (Please  call  for 
Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/viewcontract. 
jsp?cNum=W91  QUZ-07-A-0006 


(W91 QUZ-07-A-0006) 

1  for  ordering  by  all  Department  < 
contractors. 

extension  information. 
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Mercury 


Mercury  Software  -  Provides  software  licenses,  training,  technical  support 
and  maintenance  for  Mercury  Performance  Center,  Mercury  Quality  Center,  Mer¬ 
cury  IT  Governance  Center  and  Mercury  Availability  Center. 

Contractor:  Spectrum  Systems ,  Inc .  (SP4700-05-A-0002) 

Ordering  Expires:  21  Feb  09  (New  agreement  to  be  awarded.  Please  call  for 
information.) 

Web  Link:  http://www.spectrum-systems.com/contracts/esi-hp.htm 

COTS  Systems  Integration  Services 

COTS  Systems  Integration  Services  -  Provides  the  configuration;  integra¬ 
tion;  installation;  data  conversion;  training;  testing;  object  development;  interface 
development;  business  process  reengineering;  project  management;  risk  manage¬ 
ment;  quality  assurance;  and  other  professional  services  for  COTS  software  imple- 
mentations.OrderingundertheBPAsisdecentralizedand  isopen  toall  DoDactivities. 
The  BPAs  offer  GSA  discounts  from  10  to  20  percent.  Firm-fixed  prices  and  perfor¬ 
mance-based  contracting  approaches  are  provided  to  facilitate  more  efficient  buy¬ 
ing  of  systems  integration  services.  Five  BPAs  were  competitively  established  against 
the  GSA  schedule.  Task  orders  must  be  competed  among  the  five  BPA  holders  in 
accordance  with  DFARS  208.404-70  and  Section  C.1 .1  of  the  BPA.  Acquisition  strate¬ 
gies  at  the  task  order  level  should  consider  that  Section  803  of  the  National  Defense 
Authorization  Act  for  2002  requirements  were  satisfied  by  the  BPA  competition. 

Contractors: 

Accenture  LLP  (nooi  04-04-a-zfi  2);  (703)  947-2059 
BearingPoint  (nooi  04-04-a-zfi  5);  (703)  747-8854 
Computer  Sciences  Corp.  (N00104-04-a-zfi6);(856)  988-4505 
Deloitte  Consulting  LLP  (nooi  04-04-a-zfi  7);  (571 )  480-7272 
IBM  Corp.  (N001 04-04-A-ZFI  8);  (703)  424-7581 

Ordering  Expires:  03  May  09  (Please  call  for  information  about  follow-on 
contract.) 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/erp_services/ 
erp-esi.shtml 

Database  Management  Tools 


Microsoft  Products 


Microsoft  Database  Products  -  See  information  under  Office  Systems  on 
page  58. 


Oracle  (DEAL-O) 


Oracle  Products  -  Provides  Oracle  database  and  application  software  licenses, 
support,  training  and  consulting  services.  The  Navy  Enterprise  License  Agreement 
is  for  database  licenses  for  Navy  customers.  Contact  the  Navy  project  manager. 

Contractors: 

Oracle  Corp.  (W91QUZ-07-A-0001);(703)  364-3351 
DLT Solutions  (W91 QUZ-06-A-0002);  (703)  708-91 07 

immixTechnology,  Inc.  (W91QUZ-08-A-0001);  Small  Business;  (703)  752-0632 

Mythics,  Inc.  (W91 QUZ-06-A-0003);  (757)  284-6570 

TKC  Integration  Services,  LLC  (W9i  QUZ-09-A-0001 );  (571 )  323-5584 

Ordering  Expires: 

Oracle:  30  Sep  1 1 
DLT:  1  Apr  13 

immixTechnology:  26  Aug  11 
Mythics:  18  Dec  1 1 
TKCIS:29  Jun  1 1 

Authorized  Users:  This  has  been  designated  as  a  DoD  ESI  and  GSA  SmartBUY 
contract  and  is  open  for  ordering  by  all  U.S. federal  agencies,  DoD  components  and 
authorized  contractors. 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Special  Note  to  Navy  Users:  On  Oct.  1,  2004,  and  May  6,  2005,  the  Navy 
established  the  Oracle  Database  Enterprise  License,  effective  through  Sept.  30, 201 3. 
The  enterprise  license  provides  Navy  shore-based  and  afloat  users  to  include  active 
duty,  Reserve  and  civilian  billets,  as  well  as  contractors  who  access  Navy  systems, 
the  right  to  use  Oracle  databases  for  the  purpose  of  supporting  Navy  internal 
operations.  Navy  users  in  joint  commands  or  supporting  joint  functions  should 
contact  the  NAVICP  Mechanicsburg  contracting  officer  at  (71 7)  605-321 0  for  further 
review  of  the  requirements  and  coverage. 


This  license  is  managed  by  the  Space  and  Naval  Warfare  Systems  Center  (SPAWAR- 
SYSCEN)  Pacific  DON  Information  Technology  (IT)  Umbrella  Program  Office.  The 
Navy  Oracle  Database  Enterprise  License  provides  significant  benefits  including 
substantial  cost  avoidance  for  the  Department.  It  facilitates  the  goal  of  net-centric 
operations  by  allowing  authorized  users  to  access  Oracle  databases  for  Navy  internal 
operations  and  permits  sharing  of  authoritative  data  across  the  Navy  enterprise. 

Programs  and  activities  covered  by  this  license  agreement  shall  not  enter  into  sepa¬ 
rate  Oracle  database  licenses  outside  this  central  agreement  whenever  Oracle  is 
selected  as  the  database.  This  prohibition  includes  software  and  software  mainte¬ 
nance  that  is  acquired: 

a.  as  part  of  a  system  or  system  upgrade,  including  Application  Specific  Full  Use 
(ASFU)  licenses; 

b.  under  a  service  contract; 

c.  under  a  contract  or  agreement  administered  by  another  agency,  such  as  an  inter¬ 
agency  agreement; 

d.  under  a  Federal  Supply  Service  (FSS)  Schedule  contract  or  blanket  purchase  agree¬ 
ment  established  in  accordance  with  FAR  8.404(b)(4);  or 

e.  by  a  contractor  that  is  authorized  to  order  from  a  Government  supply  source  pur¬ 
suant  to  FAR  51.101. 

This  policy  has  been  coordinated  with  the  Office  of  the  Assistant  Secretary  of  the 
Navy  (Financial  Management  and  Comptroller),  Office  of  Budget. 


Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/deal/Oracle/ 
oracle.shtml 


Sybase  (DEAL-S) 


Sybase  Products  -  Offers  a  full  suite  of  software  solutions  designed  to  assist 
customers  in  achieving  Information  Liquidity.  These  solutions  are  focused  on  data 
management  and  integration;  application  integration;  Anywhere  integration;  and 
vertical  process  integration,  development  and  management.  Specific  products 
include  but  are  not  limited  to:  Sybase's  Enterprise  Application  Server;  Mobile  and 
Embedded  databases;  m-Business  Studio;  HIPAA  (Health  Insurance  Portability  and 
Accountability  Act)  and  Patriot  Act  Compliance;  PowerBuilder;  and  a  wide  range  of 
application  adaptors.  In  addition,  a  Golden  Disk  for  the  Adaptive  Server  Enterprise 
(ASE)  product  is  part  of  the  agreement.  The  Enterprise  portion  of  the  BPA  offers  NT 
servers,  NT  seats,  Unix  servers,  Unix  seats,  Linux  servers  and  Linux  seats.  Software 
purchased  under  this  BPA  has  a  perpetual  software  license.  The  BPA  also  has  excep¬ 
tional  pricing  for  other  Sybase  options.  The  savings  to  the  government  is  64  percent 
off  GSA  prices. 


Contractor:  Sybase,  Inc.  (daabi  5-99-A-1 003);  (800)  879-2273;  (301 )  896-1 661 

Ordering  Expires:  30  Sep  09 

Authorized  Users:  Authorized  users  include  personnel  and  employees  of  the 
DoD,  Reserve  components  (Guard  and  Reserve),  U.S.  Coast  Guard  when  mobilized 
with,  or  attached  to  the  DoD  and  nonappropriated  funds  instrumentalities.  Also  in¬ 
cluded  are  Intelligence  Communities,  including  all  DoD  Intel  Information  Systems 
(DoDIIS)  member  organizations  and  employees.  Contractors  of  the  DoD  may  use  this 
agreement  to  license  software  for  performance  of  work  on  DoD  projects. 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 
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Enterprise  Application  Integration 


Sun  Software 


Sun  Products  -  Provides  Sun  Java  Enterprise  System  (JES)  and  Sun  StarOf- 
fice.  Sun  JES  products  supply  integration  and  service-oriented  architecture  (SOA) 
software  including:  JES  Identity  Management  Suite;  JES  Communications  Suite; 
JES  Availability  Suite;  JES  Web  Infrastructure  Suite.  Sun  StarOffice  supplies  a  full- 
featured  office  productivity  suite. 

Contractors: 

Commercial  Data  Systems,  Inc.  (N00104-08-A-ZF38);  Small  Business; 

(619)  569-9373 

Dynamic  Systems,  Inc.  (N00104-08-A-ZF40);  Small  Business;  (801)444-0008 
World  Wide  Technology,  Inc.  (N00104-08-A-ZF39);  Small  Business; 
(301)731-8105 

Ordering  Expires:  24  Sep  ^  2 
Web  Link: 

http://www.it-umbrella.navy.mil/contract/enterprise/application_integration/ 

SUN/index.shtml 


Enterprise  Architecture  Tools 


IBM  Software  Products 


IBM  Software  Products  -  Provides  IBM  product  licenses  and  maintenance 
with  discounts  from  1  to  1 9  percent  off  GSA  pricing.  On  June  28, 2006,  the  IBM  Ra¬ 
tional  Blanket  Purchase  Agreement  (BPA)  with  immixTechnology  was  modified  to 
include  licenses  and  Passport  Advantage  maintenance  for  IBM  products,  including: 
IBM  Rational,  IBM  Database  2  (DB2),  IBM  Informix,  IBM  Trivoli,  IBM  Websphere  and 
Lotus  software  products. 

Contractor:  immixTechnology,  Inc.  (DABL01-03-A-1006); Small  Business; 
(800)  433-5444 

Ordering  Expires:  26  Jun  09  (Please  call  for  extension  information.) 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Enterprise  Management 


CA  Enterprise  Management  Software 
(C-EMS2) 


Computer  Associates  Unicenter  Enterprise  Management  Software  in¬ 
cludes  Security  Management;  Network  Management;  Event  Management;  Output 
Management;  Storage  Management;  Performance  Management;  Problem  Manage¬ 
ment;  Software  Delivery;  and  Asset  Management.  In  addition  to  these  products 
there  are  many  optional  products,  services  and  training  available. 


Contractor:  Computer  Associates  International,  Inc. 

(W91 QUZ-04-A-0002);  (800)  645-3042 

Ordering  Expires:  22  Sep  09 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Citrix  -  Provides  a  full  range  of  Metaframe  products  including  Secure  Access 
Manager,  Conferencing  Manager,  Password  Manager,  Access  Suite  &  XP  Presenta¬ 
tion  Server.  Discounts  range  from  2  to  5  percent  off  GSA  Schedule  pricing  plus  spot 
discounts  for  volume  purchases. 

Contractor:  Citrix  Systems,  Inc.  (W91quz-04-a-oooi);(772)  221-86O6 
Ordering  Expires:  22  May  09  (Please  call  for  extension  information.) 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Microsoft  Premier  Support  Services 
(MPS-2) 


Microsoft  Premier  Support  Services  -  Provides  premier  support  pack¬ 
ages  to  small  and  large-size  organizations.The  products  include  Technical  Account 
Managers,  Alliance  Support  Teams,  Reactive  Incidents,  on-site  support, Technet  and 
MSDN  subscriptions. 

Contractor:  Microsoft  (W9iQUZ-09-D-0038);(980)  776-8283 

Ordering  Expires:  31  Mar  10 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Q 


NetlQ  -  Provides  Net  IQ  systems  management,  security  management  and  Web 
analytics  solutions.  Products  include:  AppManager;  AppAnalyzer;  Mail  Marshal; Web 
Marshal;  Vivinet  voice  and  video  products;  and  Vigilant  Security  and  Management 
products.  Discounts  are  1 0  to  8  percent  off  GSA  schedule  pricing  for  products  and  5 
percent  off  GSA  schedule  pricing  for  maintenance. 

Contractors: 

NetlQ  Corp.  (W91QUZ-04-A-0003) 

Northrop  Grumman  -  authorized  reseller 

Federal  Technology  Solutions,  Inc.  -  authorized  reseller 
Ordering  Expires:  5  May  09  (Please  call  for  extension  information.) 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


ProSight  -  Provides  software  licenses,  maintenance, training  and  installation  ser¬ 
vices  for  enterprise  portfolio  management  software.The  software  product  provides 
the  enterprise  with  a  suite  of  solution  specific  applications  for  Capital  Planning  and 
Investment  Control  (CPIC)  Budgeting  (OMB  300/53);  CPIC  Process  (Select/Control/ 
Evaluate);  IT  Governance;  FISMA  (Federal  Information  Security  Management  Act) 
and  Privacy  Compliance;  Project  Portfolio  Management;  Application  Rationaliza¬ 
tion;  Research  and  Development  (R&D)  and  Product  Development;  Asset  Manage- 
ment;Grants  Management; Vendor  and  Service  Level  Agreement  Management;and 
Regulatory  Compliance.  ProSight  products  have  been  designated  as  a  DoD  ESI  and 
GSA  SmartBUY.  The  BPA  award  has  been  determined  to  be  the  best  value  to  the 
government  and; therefore,  competition  is  not  required  for  software  purchases.  Dis¬ 
count  range  for  software  is  from  8  to  39  percent  off  GSA  pricing,  which  is  inclusive  of 
software  accumulation  discounts.  For  maintenance,  training  and  installation  servic¬ 
es, discount  range  is  3  to  1 0  percent  off  GSA  pricing.  Credit  card  orders  are  accepted. 
Contractor:  ProSight,  Inc.  (W9i  QUZ-05-A-0014);  (503)  889-481 3 
Ordering  Expires:  1 9  Sep  1 1 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 


Quest  Products 


Quest  Products  -  Provides  Quest  software  licenses,  maintenance,  services  and 
training  for  Active  Directory  Products,  enterprise  management,  ERP  planning  sup¬ 
port  and  application  and  database  support.  Quest  software  products  have  been 
designated  as  a  DoD  ESI  and  GSA  SmartBUY.  Only  Active  Directory  Products  have 
been  determined  to  be  the  best  value  to  the  government  and;  therefore,  competi¬ 
tion  is  not  required  for  Active  Directory  software  purchases.  Discount  range  for  soft¬ 
ware  is  from  3  to  48  percent  off  GSA  pricing.  For  maintenance,  services  and  training, 
discount  range  is  3  to  8  percent  off  GSA  pricing. 

Contractors: 

Quest  Software,  Inc.  (W9i  QUZ-05-A-0023);  (301 )  820-4800 
DLT Solutions  (W91 QUZ-06-A-0004);  (703)  709-71 72 

Ordering  Expires: 

Quest:  14  Aug  10 
DLT:  01  Apr  13 
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Information  Assurance  Tools 


Data  at  Rest  Solutions  BPAs  offered  through 
ESI/SmartBUY 


Web  Links: 

Quest 

https://ascp.monmouth.army.mil/scp/contracts/viewcontract.jsp?cNum= 

W91 QUZ-05-A-0023 

DLT 

https://ascp.monmouth.army.mil/scp/contracts/viewcontract.jsp?cNum= 
W91 QUZ-06-A-0004 


Telelogic  Products 


Telelogic  Products  -  Offers  development  tools  and  solutions  which  assist 
the  user  in  automation  in  the  development  life  cycle.  The  major  products  include 
DOORS,SYNERGY andTAU  Generation.  Licenses, maintenance, training  and  services 
are  available. 

Contractors: 

Bay  State  Computers ,  Inc.  (N00104-07-A-ZF48);  Small  Business  Disadvan¬ 
taged;  (301 )  352-7878,  ext.  1 1 6 

Spectrum  Systems ,  Inc.  (N001 04-07-A-ZF46);  Small  Business ; 

(703)591-7400 

Ordering  Expires: 

Bay  State  Computers,  Inc.:  4  Aug  1 0 
Spectrum  Systems,  Inc.:  31  Jul  10 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/telelogic/ 
telelogic.shtml 

Enterprise  Resource  Planning 


Digital  Systems  Group 


Digital  Systems  Group  -  Provides  Integrated  Financial  Management  Infor¬ 
mation  System  (IFMIS)  software  that  was  designed  specifically  as  federal  financial 
management  system  software  for  government  agencies  and  activities.The  BPA  also 
provides  installation,  maintenance, training  and  professional  services. 

Contractor:  Digital  Systems  Group,  Inc.  (nooi  04-04-a-zfi  9), 

(215)  443-5178 

Ordering  Expires:  31  Aug  io 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/erp_software/ 
dsg/dsg.shtml 

Oracle  -  See  information  provided  under  Database  Management  Tools  on  page  54. 


The  Office  of  Management  and  Budget,  Defense  Department  and  General  Ser¬ 
vices  Administration  awarded  multiple  contracts  for  blanket  purchase  agreements 
(BPA)  to  protect  sensitive,  unclassified  data  residing  on  government  laptops,  other 
mobile  computing  devices  and  removable  storage  media  devices. 

These  competitively  awarded  BPAs  provide  three  categories  of  software  and 
hardware  encryption  products  —  full  disk  encryption  (FDE),  file  encryption  (FES) 
and  integrated  FDE/FES  products.  All  products  use  cryptographic  modules  validat¬ 
ed  under  FIPS  140-2  security  requirements  and  have  met  stringent  technical  and 
interoperability  requirements. 

Licenses  are  transferable  within  a  federal  agency  and  include  secondary  use 
rights.  All  awarded  BPA  prices  are  as  low  as  or  lower  than  the  prices  each  vendor  has 
available  on  GSA  schedules.The  federal  government  anticipates  significant  savings 
through  these  BPAs.The  BPAs  were  awarded  under  both  the  DoD's  Enterprise  Soft¬ 
ware  Initiative  (ESI)  and  GSA's  governmentwide  SmartBUY  programs,  making  them 
available  to  all  U.S.  executive  agencies,  independent  establishments,  DoD  compo¬ 
nents,  NATO,  state  and  local  agencies,  foreign  military  sales  (FMS)  with  written  au¬ 
thorization,  and  contractors  authorized  to  order  in  accordance  with  the  FAR  Part  51 . 

Service  component  chief  information  officers  (CIO)  are  currently  developing 
component  service-specific  enterprise  strategies.  Accordingly,  customers  should 
check  with  their  CIO  for  component-specific  policies  and  strategies  before  procur¬ 
ing  a  DAR  solution. The  Department  of  the  Navy,  Army  and  Air  Force  will  be  releasing 
service-specific  DAR  guidance  for  their  personnel  to  follow.  Go  to  the  ESI  Web  site  at 
www.esi.mil  for  more  information. 


New  Guidance  Available  for  Navy  Employees! 

The  DON  CIO  has  issued  an  enterprise  solution  for  Navy  users  purchasing  DAR 
software.  Visit  the  DON  CIO  Web  site  at  www.doncio.navy.mil  and  search  for 
"Data  at  Rest"  to  read  the  new  policy.  The  DON  awarded  MTM  Technologies 
a  BPA  for  purchase  of  the  DON  Mobile  Armor  software  bundle.  For  Navy  users , 
all  purchases  of  DON  enterprise  DAR  solutions  must  be  executed  through  the 
enterprise  BPA ,  which  can  be  found  on  the  DON  IT  Umbrella  Program  Web  site 
at  www.it-umbrella.navy.mil.  Procurement  of  other  DAR  solutions  for  Navy 
users  is  prohibited.  See  also  page  17  for  more  information  for  Navy  users. 


As  of  press  time ;  other  DoD  users  are  not  authorized  to  purchase  DAR  software 
because  service-specific  guidance  has  not  been  issued. 


Enterprise  BPA  for  Navy  DAR  Users: 

Mobile  Armor  -  MTM  Technologies,  Inc.  (FA877i-07-A-030i 


RWD  Technologies 


RWD  Technologies  -  Provides  a  broad  range  of  integrated  software  products 
designed  to  improve  the  productivity  and  effectiveness  of  end  users  in  complex  op¬ 
erating  environments.  RWD's  Info  Pak  products  allow  you  to  easily  create,  distribute 
and  maintain  professional  training  documents  and  online  help  for  any  computer 
application.  RWD  Info  Pak  products  include  Publisher,  Administrator,  Simulator  and 
OmniHelp.  Training  and  other  services  are  also  available. 

Contractor:  RWD  Technologies  (nooi  04-06-A-ZF37);  (609)  937-7628 
Ordering  Expires:  Effective  for  term  of  the  GSA  FSS  Schedule 
Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/erp_software/ 
rwd/rwd.shtml 


SAP 


SAP  Products  -  Provides  software  licenses,  software  maintenance  support,  in¬ 
formation  technology  professional  services  and  software  training  services. 

Contractors: 

SAP  Public  Services,  Inc.  (N00104-08-A-ZF41);  Large  Business;  (202)  312-3515 
Advantaged  Solutions,  Inc.  (N00104-08-A-ZF42);  Small  Business; 

(202)  204-3083 

Carahsoft  Technology  Corporation  (N00104-08-A-ZF43);  Small  Business; 
(703)  871-8583 

Oakland  Consulting  Group  (N00104-08-A-ZF44);  Small  Business; 
(301)577-4111 

Ordering  Expires:  i4Sep  13 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/erp_software/ 
sap_products/sap_hdr.shtml 


Safeboot/McAfee  -  Rocky  Mountain  Ram  (FA8771-07-A-0302) 
Information  Security  Corp.  -  Carahsoft  Technology  Corp. 

(FA8771 -07-A-0303) 

Safeboot/McAfee  -  Spectrum  Systems  (FA8771-07-A-0304) 

SafeNet,  Inc.  -  SafeNet,  Inc.  (FA8771-07-A-0305) 

Encryption  Solutions,  Inc.  -  Hi  Tech  Services,  Inc.  (FA8771-07-a-  0306) 
Pointsec/Checkpoint  -  immix  Technologies  (FA8771-07-a-0307) 
SPYRUS,  Inc.  -  Autonomic  Resources,  LLC  (FA8771 -07-A-0308) 
Credant  Technologies  -  GTS!  Corp.  -  (FA8771-07-A-0309) 

WinMagic,  Inc.  -  Govbuys,lnc.  (FA8771-07-a-0310) 

CREDANT  Technologies  -  Intelligent  Decisions  (FA8771-07-a-031  i) 
Guardian  Edge  Technologies  -  Merlin  International  (FA8771-07-A-0312) 
Ordering  Expires:  14  Jun  12  (If  extended  by  option  exercise.) 

Web  Link:  http://www.esi.mil 


McAfee  -  Provides  software  and  services  in  the  following  areas:  Anti-Virus;  E-Busi¬ 
ness  Server; ePolicy  Orchestrator; GroupShield  Services;  IntruShield;  Secure  Messag¬ 
ing  Gateway  and  Web  Gateway. 

Contractor:  En  Pointe  (GS-35F-0372N) 

Ordering  Expires:  12  Dec  09 
Web  Link:  http://www.esi.mil 
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Antivirus  Web  Links:  Antivirus  software  available  at  no  cost;  download  in¬ 
cludes  McAfee,  Symantec  and  Trend  Micro  Products. These  products  can  be  down¬ 
loaded  by  linking  to  either  of  the  following  Web  sites: 

NIPRNET  site:  https://www.jtfgno.mil/antivirus/av_info.htm 
SIPRNET  site:  http://www.cert.smil.mil/antivirus/av_info.htm 


Se 


Security  -  Provides  policy-driven  appliances  for  network  security  that  are  de¬ 
signed  to  validate  and  enforce  intended  use  of  networks  and  applications;  protects 
against  all  risks  and  saves  costs  on  network  and  security  operations.  Securify  inte¬ 
grates  application  layer  seven  traffic  analysis  with  signatures  and  vulnerability  scan¬ 
ning  in  order  to  discover  network  behavior.  It  provides  highly  accurate,  real-time 
threat  mitigation  for  both  known  and  unknown  threats  and  offers  true  compliance 
tracking. 


Contractor:  Patriot  Technologies ,  Inc.  (FA8771 -06-A-0303) 
Ordering  Expires:  04  Jan  11  (if  extended  by  option  exercise) 
Web  Link:  http://www.esi.mil 


Symantec 


Symantec  -  Symantec  products  can  be  divided  into  10  main  categories  that  fall 
under  the  broad  definition  of  Information  Assurance.  These  categories  are:  virus 
protection;  anti-spam;  content  filtering;  anti-spyware  solutions;  intrusion  protec¬ 
tion;  firewalls/VPN;  integrated  security;  security  management;  vulnerability  man¬ 
agement;  and  policy  compliance. This  BPA  provides  the  full  line  of  Symantec  Corp. 
products  and  services  consisting  of  over  6,000  line  items  including  Ghost  and 
Brightmail.  It  also  includes  Symantec  Antivirus  products  such  as  Symantec  Client 
Security;  Norton  Antivirus  for  Macintosh;  Symantec  System  Center;  Symantec  Anti- 
Virus/Filtering  for  Domino; Symantec  AntiVirus/Filtering  for  MS  Exchange; Symantec 
AntiVirus  Scan  Engine;  Symantec  AntiVirus  Command  Line  Scanner;  Symantec  for 
Personal  Electronic  Devices;  Symantec  AntiVirus  for  SMTP  Gateway;  Symantec  Web 
Security; and  support. 

Contractor:  immixGroup  (FA8771  -05-0301 ) 

Ordering  Expires:  1 2  Sep  1 0 

Web  Link:  http://var.immixgroup.com/contracts/overview.cfm  orwww.esi.mil 

Notice  to  DoD  customers  regarding  Symantec  Antivirus  Products:  A  fully  funded 
and  centrally  purchased  DoD  enterprise-wide  antivirus  and  spyware  software  li¬ 
cense  is  available  for  download  to  all  Department  of  Defense  (DoD)  users  who  have 
a  .mil  Internet  Protocol  (IP)  address. 

Contractor:  TVAR  Solutions ,  Inc. 

Antivirus  Web  Links:  Antivirus  software  can  be  downloaded  at  no  cost  by 
linking  to  either  of  the  following  Web  sites: 

NIPRNET  site:  https://www.jtfgno.mil/antivirus/av_info.htm 
SIPRNET  site:  http://www.cert.smil.mil/antivirus/av_info.htm 


Xacta  -  Provides  Web  Certification  and  Accreditation  (C&A)  software  products, 
consulting  support  and  enterprise  messaging  management  solutions  through  its 
Automated  Message  Handling  System  (AMHS)  product.The  software  simplifies  C&A 
and  reduces  its  costs  by  guiding  users  through  a  step-by-step  process  to  determine 
risk  posture  and  assess  system  and  network  configuration  compliance  with  appli¬ 
cable  regulations,  standards  and  industry  best  practices,  in  accordance  with  the 
DITSCAP,  NIACAP,  NIST  or  DCID  processes.  Xacta's  AMFIS  provides  automated,  Web- 
based  distribution  and  management  of  messaging  across  your  enterprise. 


Contractor:  Telos  Corp.  (F01620-03-A-8003);  (703)  724-4555 
Ordering  Expires:  30  Mar  09  (Please  call  for  information  about  follow-on 
contract.) 


Web  Link:  http://esi.telos.com/contract/overview/ 


Lean  Six  Sigma  Tools 


iGrafx  Business  Process  Analysis  Tools 


iGrafx  -  Provides  software  licenses,  maintenance  and  media  for  iGrafx  Process 
2005  and  2006;  Six  Sigma  and  iGrafx  Flowcharter  2005  and  2006;  iGrafx  Process  for 
Six  Sigma  2007;  iGrafx  Flowcharter  2007;  Enterprise  Central; and  Enterprise  Modeler. 

Contractors: 

Softchoice  Corporation  (N00i04-09-A-ZF34);(4i6)  588-9002  ext. 2072 
Softmart,  Inc.  (N00i04-09-A-ZF33);(6i0)  51 8-41 92 
Software  House  International  (nooi  04-09-A-ZF35);  (732)  564-8333 
Authorized  Users:  Open  for  ordering  by  all  Department  of  Defense  (DoD) 
components,  U.  S.  Coast  Guard,  NATO,  Intelligence  Community  and  authorized  DoD 
contractors. 

Ordering  Expires:  31  Jan  14 
Web  Links: 

Softchoice 

http://www.it-umbrella.navy.mil/contract/enterprise/iGrafx/softchoice/index.shtml 

Softmart 

http://www.it-umbrella.navy.mil/contract/enterprise/iGrafx/softmart/index.shtml 
Software  House  International 

http://www.it-umbrella.navy.mil/contract/enterprise/iGrafx/shi/index.shtml 


i.'iimren 


Minitab  -  Provides  software  licenses,  media,  training,  technical  services  and  main¬ 
tenance  for  products  including  Minitab  Statistical  Software, Quality  Companion,  and 
Quality  Trainer.  It  is  the  responsibility  of  the  ordering  officer  to  ensure  compliance 
with  all  fiscal  laws  prior  to  issuing  an  order  under  a  BPA,  and  to  ensure  that  the  ven¬ 
dor  selected  represents  the  best  value  for  the  requirement  being  ordered  (see  FAR 


8.404). 

Contractor:  Minitab,  Inc.  (nooi 04-08-A-ZF30);  (800)  448-3555  ext.  31 1 
Authorized  Users:  This  BPA  is  open  for  ordering  by  all  Department  of  Defense 
(DoD)  components,  U.S.  Coast  Guard,  NATO,  Intelligence  Community  and  authorized 
DoD  contractors. 


Ordering  Expires:  07  May  1 3 

Web  Link:  http://www.it-umbrella.navy.mil/contract/minitab/minitab.shtml 


m 


PowerSteering  -  Provides  software  licenses  (subscription  and  perpetual),  me¬ 
dia,  training,  technical  services,  maintenance,  hosting  and  support  for  PowerSteer¬ 
ing  products:  Software-as-a-Service  solutions  to  apply  the  proven  discipline  of  proj¬ 
ect  and  portfolio  management  in  IT,  Lean  Six  Sigma,  Project  Management  Office  or 
any  other  project-intensive  area  and  to  improve  strategy  alignment,  resource  man¬ 
agement,  executive  visibility  and  team  productivity.  It  is  the  responsibility  of  the 
ordering  officer  to  ensure  compliance  with  all  fiscal  laws  prior  to  issuing  an  order 
under  a  BPA,  and  to  ensure  that  the  vendor  selected  represents  the  best  value  for 
the  requirement  being  ordered  (see  FAR  8.404). 


Contractor:  immixTechnology,  Inc.  (N00104-08-A-ZF31);  Small  Business; 
(703)  752-0661 


Authorized  Users:  All  DoD  components,  U.S.  Coast  Guard,  NATO,  Intelligence 
Community,  and  authorized  DoD  contractors. 

Ordering  Expires:  14  Aug  13 

Web  Link:  http://www.it-umbrella.navy.mil/contract/PowerSteering/ 
PowerSteering.shtml 
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Office  Systems 


Products 


Adobe  Desktop  Products  -  Provides  software  licenses  (new  and  upgrade) 
and  maintenance  for  numerous  Adobe  desktop  products,  including  Acrobat  (Stan¬ 
dard  and  Professional);  Photoshop;  InDesign;  After  Effects;  Frame;  Creative  Suites; 
Illustrator;  Flash  Professional;  Dreamweaver;  ColdFusion  and  other  Adobe  desktop 
products. 

Contractors: 

ASAP  (N001 04-08-A-ZF33);  (800)  248-2727,  ext.  5303 
CDW-G  (N001 04-08-A-ZF34);  (703)  621-821 1 
GovConnection,  Inc.  (nooi  04-08-A-ZF35);  (301 )  340-3861 
Insight  Public  Sector,  Inc.  (nooi  04-08-A-ZF36);  (301 )  261  -6970 

Ordering  Expires:  30  Jun  13 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/adobe-esa/ 
index.shtml 


Adobe  Server  Products  -  NEW! 


Adobe  Server  Products  -  Provides  software  licenses  (new  and  upgrade), 
maintenance,  training  and  support  for  numerous  Adobe  server  products  including 
LiveCycle  Forms;  LiveCycle  Reader  Extensions;  Acrobat  Connect;  Flex;ColdFusion  En¬ 
terprise;  Flash  Media  Server  and  other  Adobe  server  products. 

Contractor: 

Carahsoft  Technology  Corp.  (N00104-09-A-ZF31);  Small  Business; 

(703)  871-8503 

Ordering  Expires:  14  Jan  14 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/adobe-srvr/ 
carahsoft/carahsoft.shtml 


Microsoft  Products 


Microsoft  Products  -  Provides  licenses  and  software  assurance  for  desktop 
configurations,  servers  and  other  products.  In  addition,  any  Microsoft  product 
available  on  the  GSA  schedule  can  be  added  to  the  BPA. 

Contractors: 

Dell  Marketing  L.P.  (formerly  ASAP)  (NOOI  04-02-A-ZE78);  (800)  248-2727,  ext. 
5303 

CDW-G  (NOOI 04-02-A-ZE85);  (877)  890-1 330 

Dell  (N001 04-02-A-ZE83);  (800)  727-1 1 00  ext.  7253702  or  (512)  725-3702 
GTSI  (N001 04-02-A-ZE79);  Small  Business;  (800)  999-GTSI  ext.  2071 
Hewlett-Packard  (NOOI  04-02-A-ZE80);  (978)  399-981 8 
Softchoice  (N00104-02-A-ZE81);  Small  Business;  (877)  333-7638 
Softmart  (N001 04-02-A-ZE84);  (800)  628-9091  ext.  6928 
Software  House  International  (nooi  04-02-A-ZE86);  (732)  868-5926 
Insight  Public  Sector,  Inc.  (nooi  04-02-A-ZE82);  (800)  862-8758 
Ordering  Expires:  31  Mar  io 

Web  Link:  http://www.it-umbrella.navy.mil/contract/enterprise/microsoft/ms- 
ela.shtml 


Red  Hat/Netscape/Firefox 


Through  negotiations  with  August  Schell  Enterprises,  DISA  has  established  a 
DoD-wide  enterprise  site  license  whereby  DISA  can  provide  ongoing  support  and 
maintenance  for  the  Red  Flat  Security  Solution  server  products  that  are  at  the  core 
of  the  Department  of  Defense's  Public  Key  Infrastructure  (PKI). 

The  Red  Flat  Security  Solution  includes  the  following  products:  Red  Flat  Certifi¬ 
cate  System  and  dependencies;  Red  Flat  Directory  Server;  Enterprise  Web  Server 
(previously  Netscape  Enterprise  Server);  and  Red  Flat  Fortitude  Server  (replacing 
Enterprise  Server). 

August  Schell  also  provides  a  download  site  that,  in  addition  to  the  Red  Flat  prod¬ 
ucts, also  allows  for  downloading  DISA  approved  versions  of  the  following  browser 
products:  Firefox  Browser;  Netscape  Browser;  Netscape  Communicator;  and  Per¬ 
sonal  Security  Manager. 


The  Red  Flat  products  and  services  provided  through  the  download  site  are  for 
exclusive  use  in  the  following  licensed  community:  (1)  All  components  of  the  U.S. 
Department  of  Defense  and  supported  organizations  that  utilize  the  Joint  World¬ 
wide  Intelligence  Communications  System,  and  (2)  All  non-DOD  employees  (e.g., 
contractors,  volunteers,  allies)  on-site  at  the  U.S.  Department  of  Defense  and  those 
not  on-site  but  using  equipment  furnished  by  the  U.S.  Department  of  Defense  (GFE) 
in  support  of  initiatives  which  are  funded  by  the  U.S.  Department  of  Defense. 

Licensed  software  products  available  through  the  August  Schell  contract  are  for 
the  commercial  versions  of  the  Red  Flat  software,  not  the  segmented  versions  of 
the  previous  Netscape  products  that  are  compliant  with  Global  Information  Grid 
(GIG)  standards.The  segmented  versions  of  the  software  are  required  for  develop¬ 
ment  and  operation  of  applications  associated  with  the  GIG,  the  Global  Command 
and  Control  System  (GCCS)  or  the  Global  Combat  Support  System  (GCSS). 

If  your  intent  is  to  use  a  Red  Flat  product  to  support  development  or  operation 
of  an  application  associated  with  the  GIG,  GCCS  or  GCSS,  you  must  contact  one  of 
the  Web  sites  listed  below  to  obtain  the  GIG  segmented  version  of  the  software. 
You  may  not  use  the  commercial  version  available  from  the  August  Schell  Red  Flat 
download  site. 

If  you  are  not  sure  which  version  (commercial  or  segmented)  to  use,  we  strongly 
encourage  you  to  refer  to  the  Web  sites  listed  below  for  additional  information  to 
help  you  to  make  this  determination  before  you  obtain  the  software  from  the  Au¬ 
gust  Schell  Red  Flat  download  site  (or  contact  the  project  manager  listed  below). 

GIG  or  GCCS  users:  Common  Operating  Environment  Flome  Page 
http://www.disa.mil/gccs-j/index.html 
GCSS  users:  Global  Combat  Support  System 
http://www.disa.mil/services/gcss-j.html 

Contractor:  August  Schell  Enterprises  (www.augustscheii.com) 

Download  Site:  http://redhat.augustschell.com 

Ordering  Expires:  14  Mar  09  (Please  call  for  extension  information.) 

All  downloads  provided  at  no  cost. 

Web  Link:  http://iase.disa.mil/netlic.html 


Red  Hat  Linux 


Red  Hat  Linux  -  Provides  operating  system  software  license  subscriptions  and 
services  to  include  installation  and  consulting  support,  client-directed  engineering 
and  software  customization.  Red  Flat  Enterprise  Linux  is  the  premier  operating  sys¬ 
tem  for  open  source  computing.  It  is  sold  by  annual  subscription,  runs  on  seven  sys¬ 
tem  architectures  and  is  certified  by  top  enterprise  software  and  hardware  vendors. 
Contractors: 

Carahsoft  Technology  Corporation  (hci  028-09- A-2004) 

DLT Solutions,  Inc.  (FICI 01 3-04-A-5000)  This  contract  will  be  replaced  by  a 
new  DLT  contract  (FIC1028-09-A-2003)  which  is  listed  below. 

DLT  Solutions,  Inc.  (HC1028-09-A-2003) 

Ordering  Expires: 

Carahsoft:  1 0  Feb  09  (Please  call  for  extension  information.) 

DLT  Solutions:  30  Apr  09  (Please  call  for  information  about  the  follow-on  con¬ 
tract.) 

Web  Link:  http://www.esi.mil 


WinZip-This  is  an  IDIQ  contract  with  EyakTechnology,  LLC, an  "8(a)"Small  Disad¬ 
vantaged  Business  (SDB)/Alaska  Native  Corp.  for  the  purchase  of  WinZip  Standard, 
a  compression  utility  for  Windows.  Minimum  quantity  order  via  delivery  order  and 
via  Government  Purchase  Card  to  EyakTechnology,  LLC  is  1,250  WinZip  licenses. 

Contractor:  Eyak  Technology,  LLC  (W9i  quz-04-d-ooi  o) 

Authorized  Users:  This  has  been  designated  as  a  DoD  ESI  and  GSA  SmartBUY 
contract  and  is  open  for  ordering  by  all  U.S. federal  agencies,  DoD  components  and 
authorized  contractors. 

Ordering  Expires:  27  Sep  09 

Web  Link:  https://ascp.monmouth.army.mil/scp/contracts/compactview.jsp 
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Apple  -  Provides  Apple  Desktop  and  Server  Software,  maintenance,  related 
services  and  support  as  well  as  Apple  Perpetual  Software  licenses.  These  licenses 
include  Apple  OS  X  Server  v10.5;  Xsan  2;  Apple  Remote  Desktop  3.2;  Aperture  2; 
Final  Cut  Express  4;  Final  Cut  Studio  2;  iLife  '08;  iWork'08;  Logic  Express  8;  Logic  Pro 
7;  Mac  OS  X  vl  0.5  Leopard;  QuickTime  7  Pro  Mac;  and  Shake  4.1  Mac  OS  X.  Software 
Maintenance,  OS  X  Server  Support,  AppleCare  Support  and  Technical  Service  are 
also  available. 


Contractor:  Apple ,  Inc.  (hci  047-08-a-i  01 1 ) 
Ordering  Expires:  1 0  Sep  1 1 
Web  Link:  http://www.esi.mil 


Sun  (SSTEW) 


SUN  Support  -  Sun  Support  Total  Enterprise  Warranty  (SSTEW)  offers  extended 
warranty,  maintenance,  education  and  professional  services  for  all  Sun  Microsystems 
products. The  maintenance  covered  in  this  contract  includes  flexible  and  compre¬ 
hensive  hardware  and  software  support  ranging  from  basic  to  mission  critical  ser¬ 
vices.  Maintenance  covered  includes  Sun  Spectrum  Platinum,  Gold,  Silver,  Bronze, 
hardware  only  and  software  only  support  programs. 

Contractor:  Dynamic  Systems  (DCA200-02-A-501 1) 

Ordering  Expires:  Dependent  on  GSA  Schedule  until  201 1 
Web  Link:  http://www.ditco.disa.mil/hq/contracts/sstewchar.asp 


Go  to  the  Web  sites  listed  below 
to  learn  more: 


Research  and  Advisory  BPA 


Research  and  Advisory  Services  BPAs  provide  unlimited  access  to  telephone  inquiry 
support,  access  to  research  via  Web  sites  and  analyst  support  for  the  number  of  us¬ 
ers  registered.  In  addition,  the  services  provide  independent  advice  on  tactical  and 
strategic  IT  decisions.  Advisory  services  provide  expert  advice  on  a  broad  range  of 
technical  topics  and  specifically  focus  on  industry  and  market  trends.  BPA  listed  below. 
Gartner  Group  (N00104-07-A-ZF30);(703)  378-5697;  Awarded  01  Dec  2006 
Ordering  Expires:  Effective  for  term  of  GSA  contract 

Authorized  Users:  All  DoD  components.  For  the  purpose  of  this  agreement, 
DoD  components  include:  the  Office  of  the  Secretary  of  Defense;  U.S.  Military  De¬ 
partments;  the  Chairman  of  the  Joint  Chiefs  of  Staff;  Combatant  Commands;  the 
Department  of  Defense  Office  of  Inspector  General;  Defense  Agencies;  DoD  Field 
Activities;  the  U.S.  Coast  Guard;  NATO;  the  Intelligence  Community  and  Foreign  Mili¬ 
tary  Sales  with  a  letter  of  authorization.  This  BPA  is  also  open  to  DoD  contractors 
authorized  in  accordance  with  the  FAR  Part  51 . 

Web  Link:  http://www.it-umbrella.navy.mil/contract/r&a/gartner/gartner.shtml 


Section  508  Tools 


HiSoftware  508  Tools 


HiSoftware  Section  508  Web  Developer  Correction  Tools  - 

Includes  AccRepair  (StandAlone  Edition),  AccRepair  for  Microsoft  FrontPage, 
AccVerify  for  Microsoft  FrontPage  and  AccVerify  Server.  Also  includes  consulting  and 
training  support  services. 

Contractor:  HiSoftware,  DLT Solutions,  Inc.  (N001 04-01 -A-Q570),  Small 
Business;  (888)  223-7083  or  (703)  773-1 1 94 

Ordering  Expires:  31  Aug  10 

Web  Link:  http://www.it-umbrella.navy.mil/contract/508/dlt/dlt.shtml 
Warranty:  IAW  GSA  schedule.  Additional  warranty  and  maintenance  options 
available.  Acquisition,  Contracting  and  Technical  fee  included  in  all  BLINS. 
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